Robert Brendler <robert.brendler(a)gmail.com> wrote, in response to Robert Brendler:
Ok, finally I found something that gives me what I want with on-board tools:
http://www.warski.org/blog/2010/04/extending-the-security-interceptor-for...
or use the ready implemented framework alternative:
http://docs.jboss.org/seam/3/security/latest/reference/en-US/html/securit...
IP address: 87.139.232.83
Link to comment:
http://redirect.disqus.com/url?url=http%3A%2F%2Fjboss.org%2Fjdf%2Fquickst...
Robert Brendler wrote:
I could only achieve my intended result by adding an additional
if ( ctx.isCallerInRole("user") &&
!ctx.isCallerInRole("guest") ) { // needs to explicitly exclude all other roles
return principal.toString();
} else {
// throw new EJBAccessException("Username
'"+principal.toString()+"' does NOT have role 'user'");
return null; // for the lazy ones
}
this is far from desireable ...
-----
Options: You can moderate through email. Respond in the body with "Delete".
Reply with "Like" to like this comment, or respond with anything else to approve
this comment and post your message as a reply comment.
Or use the moderate panel:
http://jdf.disqus.com/admin/moderate/#/pending
To turn off notifications, go to:
http://disqus.com/account/