Hi,
I followed the steps by tracing through the differences to migrate my
AppFuse based application from Acegi secutiry to Spring Security. There are
changes/customizations to use Freemarker as the major view renderer.
One issue I observed is that it took a significant longer time (5 seconds)
to get the signup page rendered. After tracing into the code, it seems to be
caused by the pointcut expression cannot be parsed correctly resulted in
AspectJ/forName throwing tons of "ClassNotFound Exception" and been
swallowed deep inside the code. As shown below as extracted from
security.xml, if the "pointcut" using fully quality classpath will results
in ClassNotFound exceptions (tons of them) which the second form works ok.
Displaying the signup page shotened from 5 seconds to about 1 second. I am
still trying to figure out why for a single signup page could take such a
long time to render.
Spring Security setting security.xml
<!-- This one will cause ClassNotFound exception -->
<global-method-security>
<protect-pointcut expression="execution(*
org.appfuse.app.service.UserManager.getUsers(..))" access="ROLE_ADMIN"/>
<protect-pointcut expression="execution(*
com.appfuse.app.service.UserManager.removeUser(..))" access="ROLE_ADMIN"/>
</global-method-security>
<-- This one works ok -->
<global-method-security>
<protect-pointcut expression="execution(*
*..service.UserManager.getUsers(..))" access="ROLE_ADMIN"/>
<protect-pointcut expression="execution(*
*..service.UserManager.removeUser(..))" access="ROLE_ADMIN"/>
</global-method-security>
I've tried spring security 2.0.0 and 2.0.1 as well as AspectJ 1.5.2a and
1.5.4 with the same problem. I remember seeing AspectJ 1.6.0 is about to be
released but I don't know whether this will solve the problem or not.
Any one encounter the same issues?
Thanks,
-- Scott Hong
--
View this message in context:
http://www.nabble.com/AppFuse-Spring-Security-AspectJ-issues-tp17047478s2369p17047478.html
Sent from the AppFuse - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
