[jboss-user] [JBoss Seam] - Re: ACL in Seam

[js8523]

Hi Gavin, 

I think that you missed yaun point, which is object level permission, like one user can edit one customer, but only view another customer. 

I was thinking a Entity Users_Role which you could then inherit (therefore extend the data model), and add custom properties (i.e. customer foreign key, or any other type of datamodel object).  You could do the equiverlent of this to the Role Entity allowing people to custom design the priveledges a Role can have. 

You could then add a equiverlent to isUserInRole called hasPriveledge that checks the current principal has the priveledge. 

In answer to the original question, people have tried to use acegi with Seam with some success, please search this forum for previous posts. 

If you come up with any firm information you could post it on the Wiki. 

HTH, 

James 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3960598#3960598

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3960598