[jboss-user] [JBoss Seam] - Re: Security Problem

Eethyo do-not-reply at jboss.com
Tue Sep 11 10:13:06 EDT 2007


if i leave the Principal(pName:name) away and put a
hardcoded pName in my equals it works fine.
so there must be a conflict between the pName:name and the
Role(name=='anyrole').

so and now i dont know what i am doing wrong.
do i miss some ( ) or something?

package Permissions;
  | 
  | import java.security.Principal;
  | 
  | import org.jboss.seam.security.PermissionCheck;
  | import org.jboss.seam.security.Role;
  | import com.mydomain.session.User;
  | 
  | rule canUserEditProfile
  | when
  | c: PermissionCheck(name == 'userProfil', action=='editUserProfil');
  | (User(username : username -> (username.equals("hardcodedUser")))
  | or
  | Role(name =='Admin' ))
  | then 
  | c.grant();
  | end;
  | 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4083036#4083036

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4083036



More information about the jboss-user mailing list