You can use mvn appfuse:full-source to populate your project with the
AppFuse source, which will allow you to change the security advice at will
(please make a backup/put your project in SCM first :-)

Mike

On 10/22/07, Florian Kirchhoff <[EMAIL PROTECTED]> wrote:
>
>
> Hi,
>
> I generated a Spring MVC based application using appfuse:gen. Now I am
> trying to change the Authentication scheme from DB to LDAP based. I would
> like to keep the source of Roles
> from the DB (this works after some other issue with
> http://www.nabble.com/forum/ViewPost.jtp?post=13300084&framed=y&skin=2369
> footer.jsp ).
>
> Maybe there is a simpler way for me to do authentication against LDAP and
> do
> the authorization against the DB, please let me know if I am on the wrong
> track here... be here's what I've done and I were I am stuck...
>
> I have extended DefaultLdapAuthoritiesPopulator in order to provide Roles
> from both LDAP and the DB. This work fine, I can log in and edit my
> entities
> just fine.
>
> The issue is when I want to edit/add a new user (assuming he/she exists in
> LDAP). On save I get this exception:
> java.lang.ClassCastException:
> org.acegisecurity.userdetails.ldap.LdapUserDetailsImpl
>         at
> org.appfuse.service.UserSecurityAdvice.getCurrentUser(
> UserSecurityAdvice.java:135)
>         at
> org.appfuse.service.UserSecurityAdvice.before(UserSecurityAdvice.java:68)
>
> After looking at UserSecurityAdvice.java I can see that the userDetails
> and/or the principal are
> downcasted to org.appfuse.model.User, which is not going to work when Ldap
> is used for
> auth/authz.
>
> For this reason I wanted to replace the
> org.appfuse.service.UserSecurityAdvice class with my own Advice class, but
> the advice is defined in applicationContext-service.xml inside
> appfuse-service-2.0.jar...
>
> How can I replace it with my own advice?
>
> In advance thank you for your help with this matter.
>
> Florian
> --
> View this message in context:
> http://www.nabble.com/How-to-override-org.appfuse.service.UserSecurityAdvice--tf4673328s2369.html#a13351431
> Sent from the AppFuse - User mailing list archive at Nabble.com.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Reply via email to