39 Commits

Author SHA1 Message Date
Luke Taylor
e11114ce77 SEC-1023: Add hasPermission() support to SecurityExpressionRoot
http://jira.springframework.org/browse/SEC-1023.

hasPermission() now delegates to a PermissionEvaluator interface, with a default implementation provided by the Acl module. The contacts sample now uses expressions on the ContactManager interface. The permission-evaluator element on global-method-security can be used to set the instance to an AclPermissionEvaluator. If not set, all hasPermission() expressions will evaluate to 'false'.
2008-11-10 04:27:25 +00:00
Ben Alex
677607bcad SEC-530: Refactor ACL module so ACE manipulation is index-based as
opposed to AccessControlEntry.getId() based.
2008-04-05 20:43:10 +00:00
Luke Taylor
38237341b4 Removed unused getContactManager method 2008-02-15 18:06:59 +00:00
Luke Taylor
7d88ee8c48 Formatted ACL SQL for readability. 2008-01-21 18:35:22 +00:00
Ben Alex
47229be5cb Make samples and tests use username "rod". 2007-12-03 02:56:52 +00:00
Luke Taylor
4083e2ef92 SEC-562: Further repackaging. 2007-09-21 18:24:16 +00:00
Ben Alex
9f512c384e SEC-239: New ACL module. 2006-11-17 02:01:21 +00:00
Ben Alex
84671f9d68 SEC-382: Clean up resource bundle errors. 2006-11-14 02:30:00 +00:00
Ben Alex
ab12817b7a SEC-97: Format Acegi Security source code in accordance with latest Jalopy configuration. 2006-05-23 13:38:33 +00:00
Ben Alex
e63b2ec9e6 Cleanup unused imports. 2006-02-09 06:00:25 +00:00
Luke Taylor
dc959b1847 Fix for SEC-159. Added clearContext() method to SecurityContextHolder and refactored code to use it instead of putting an empty context into the holder. 2006-02-08 23:27:46 +00:00
Ben Alex
a6e23d79ae SEC-107: Rename AuthenticationDao to UserDetailsService. 2005-11-29 13:10:15 +00:00
Ben Alex
6a1a4abb1d SEC-104: Move to org.acegisecurity package. 2005-11-17 00:56:49 +00:00
Ben Alex
2d74db9a0c SEC-51 and SEC-67 related changes. Tested all functions of "filters" version in web browser OK. 2005-11-04 04:15:57 +00:00
Ben Alex
fe15b011bb Make extra seed data and users so scalability more readily tested. 2005-05-18 03:01:34 +00:00
Ben Alex
e08e66dec6 Refactor SecurityContextHolder to return a SecurityContext instead of Authentication. 2005-05-08 23:42:14 +00:00
Ben Alex
6a9abe5d90 Remove ContextHolder and introduce SecurityContext. 2005-05-07 09:11:37 +00:00
Luke Taylor
1a78f9e15f Refactored to use Spring Assert class (thanks IntelliJ :). 2005-04-15 01:21:41 +00:00
Ben Alex
9f66c0eae9 Update to current Spring JAR dependencies. 2005-03-22 11:17:22 +00:00
Luke Taylor
a4210b5551 Rolled back to remove X.509 users. Using new certificate with existing user name instead. 2005-03-19 18:40:16 +00:00
Luke Taylor
645dba1fcb Added X.509 user to contacts with user name matching certificate email address. 2005-03-11 03:05:31 +00:00
Ben Alex
dda66a0454 Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model. 2005-02-21 06:48:31 +00:00
Ben Alex
44b7cccc1f Add RMI + HTTP Invoker remoting protocols and fixes related to Maven migration. 2004-11-20 05:28:20 +00:00
Ben Alex
09cfe6eb96 Make Serializable (required by RMI). 2004-11-20 05:25:13 +00:00
Ben Alex
f286c34312 Use new BasicAclExtendedDao for DAO CRUD operations instead of ContactDao. 2004-11-15 13:04:54 +00:00
Ben Alex
6e687d47d4 Refactor Contacts Sample to use new ACL security. 2004-11-15 03:25:39 +00:00
Ben Alex
48b1cb7c85 Move UserDetails interface to net.sf.acegisecurity package. 2004-07-13 22:38:20 +00:00
Ben Alex
6314aa4efa Refactor User to an interface. 2004-06-24 23:24:14 +00:00
Ben Alex
1a0bec5bf1 Make User available from Authentication via DaoAuthenticationProvider. 2004-06-21 06:10:14 +00:00
Colin Sampaleanu
3d089aaa67 move and rename password encoding classes.
change saltSource arument to salt argument, which impl may or may not use.
2004-04-16 03:44:04 +00:00
Colin Sampaleanu
a09f2a4c18 ant format seems to have reformated these differently than what is in CVS 2004-04-13 21:59:02 +00:00
Ben Alex
7ae1844130 Improve client application by moving username/password specification to command-line. 2004-04-11 13:14:19 +00:00
Ben Alex
66e8d741ca Expand Contacts sample application to use Hessian and Burlap remoting. 2004-04-11 12:15:00 +00:00
Ben Alex
8c69eb6abb Modified to support changes to interface. 2004-04-02 11:56:00 +00:00
Ben Alex
14f27ae683 Make compatible with interface changes to aopalliance.jar. 2004-03-27 00:44:27 +00:00
Francois Beausoleil
1490e8a707 * samples/contacts/src/sample/contact/SecureIndexController.java:
Prevent a NullPointerException when no SecureContext can be found.
  Instead, throw a real exception, explaining what's wrong.
2004-03-23 17:27:04 +00:00
Francois Beausoleil
95d7ac1bf3 * samples/contacts/src/sample/contact/ContactManagerBackend.java:
Clean up how the contacts are returned.  Do not create unnecessary
  objects.
2004-03-23 17:25:34 +00:00
Ben Alex
c3507b26c9 Change to Apache License version 2.0. 2004-03-23 04:44:48 +00:00
Ben Alex
35fe1e7b73 Initial commit. 2004-03-16 23:57:17 +00:00