Hi Dan,
I added your code to some domain class but it only returns the Isis role.
I have no roles in ini-configs, only in the database via JDBC-realm. Do I maybe
have to use a certain setup for my JDBC-realm-config for this to work?
Thanks,
Erik
On 05/29/2014 02:19 AM, Dan Haywood wrote:
Hi Erik,
had a quick look at this, and "works for me"... in snapshot at least. But
I don't think there's be any recent fix in this space.
In the todo/quickstart app, I added the following to Admin service class:
* public static final Function<RoleMemento, Object> ROLE_NAME = new
Function<RoleMemento, Object>() {*
* @Override*
* public Object apply(RoleMemento input) {*
* return input.getName();*
* }*
* };*
* @ActionSemantics(Of.SAFE)*
* public String listRoles() {*
* final List<RoleMemento> roles =
getContainer().getUser().getRoles();*
* return "Roles: " + Joiner.on(",").join(Iterables.transform(roles,
ROLE_NAME));*
* }*
when I invoke that action, I get:
* Roles: realm1:admin_role,org.apache.isis.viewer.wicket.roles.USER *
Which looks correct to me; "realm1:admin_role" is the one from the
realm1.ini (Shiro file), and the other is Isis' internal role for managing
access to pages.
Dan
On 27 May 2014 12:53, Dan Haywood
<[email protected]><mailto:[email protected]> wrote:
On 27 May 2014 12:40, Erik de Hair <[email protected]><mailto:[email protected]> wrote:
What do you mean with "Is that the Shiro API?"
Shiro (which Isis integrates with / sits on top of) has its own API; was
wondering if you were using it.
If you do SubjectUtils.getUser() (or it might be SubjectUtil), then you
can get hold of Shiro's representation of the user.
I tried it the way you described but that only gives me the wicket role
mentioned before.
OK, in which case I need to look into that.
Even if Shiro (per above) does provide access to the roles etc, even so
Isis ought to be able to provide that info through its API (ie it shouldn't
be necessary to dig down to Shiro). Which it patently isn't. Slightly
confused as to why not.
Will take a look-see this eve.
Dan
On 05/27/2014 12:40 PM, Dan Haywood wrote:
Is that the Shiro API?
~~~
I think (hope) that you can get the actual roles via Isis' API:
UserMemento user = DomainObjectContainer.getUser();
List<RoleMemento> roles = user.getRoles()
Perhaps we're missing something here, though..?
Dan
On 27 May 2014 11:35, Erik de Hair
<[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
wrote:
Hi,
Calling getUser().getRoles() only gives the role
"org.apache.isis.viewer.wicket.roles.USER". Is it possible to get the
roles
assigned by shiro via JDBC-realm or do I have to query for these roles
myself?
Thanks,
Erik
