138 Commits

Author SHA1 Message Date
Luke Taylor
13af4b95a2 Sample package name updates 2009-04-18 06:04:56 +00:00
Luke Taylor
101203b44d SEC-1132: Updates to samples to reflect ACL refactoring. 2009-04-15 10:07:23 +00:00
Luke Taylor
93bdcccaee SEC-1132: Moved userdetails into core and added core/authority sub-package 2009-04-15 07:39:21 +00:00
Luke Taylor
ca7d055c2b SEC-1132: Created core and authentication packages within core module. 2009-04-13 13:43:23 +00:00
Luke Taylor
9efb5a7007 SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet 2009-04-12 12:23:23 +00:00
Luke Taylor
bec84f874a SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples. 2009-03-26 07:18:36 +00:00
Luke Taylor
2a9a8a41db SEC-1125: Created separate web module spring-security-web 2009-03-25 06:28:18 +00:00
Luke Taylor
d6ee9a9a93 Commented out hessian and burlap remoting beans to avoid missing class exceptions on startup 2009-01-03 05:51:45 +00:00
Luke Taylor
4a41416c9b Tidying up and removing compiler warnings. 2008-12-21 16:36:16 +00:00
Luke Taylor
0d7002e322 SEC-1012: Extra fixes to dependent modules following changes to Acl APIs. 2008-12-21 02:06:55 +00:00
Luke Taylor
8154161ef5 SEC-1035: Updated build to use Spring 3.0.0.M1 Release 2008-12-18 02:37:00 +00:00
Luke Taylor
7fa9a959b5 Added webAppRootKey context-param to samples to prevent conflicts when run together in Tomcat. 2008-12-16 21:13:03 +00:00
Luke Taylor
bc6878c1c5 SEC-1044: Removed remember-me functionality from http auto-config namespace configuration. Added explicit <remember-me> elements to contacts and tutorial sample configurations. 2008-12-05 16:36:43 +00:00
Luke Taylor
3cbad3ebd7 Corrected comment. 2008-12-05 16:04:22 +00:00
Luke Taylor
f3b3004085 Removed references to Acegi in contacts sample home page 2008-11-15 06:28:01 +00:00
Luke Taylor
78065ba47c Fixed up contacts sample: removed casfailed page, corrected debug.jsp errors and fixed incorrect bean reference in context files. 2008-11-15 03:38:49 +00:00
Luke Taylor
3261fcb174 Tidying stuff 2008-11-14 07:16:30 +00:00
Luke Taylor
464da0f0df SEC-999: Refactored namespace to take an expression handler instead of a permission evaluator, allowig fo greater cusomtomization and for a single handler to be used in both web and method security expressions. 2008-11-13 07:41:21 +00:00
Luke Taylor
e5b1073501 SEC-1012: Added more generics and warning suppression 2008-11-11 09:06:50 +00:00
Luke Taylor
e11114ce77 SEC-1023: Add hasPermission() support to SecurityExpressionRoot
http://jira.springframework.org/browse/SEC-1023.

hasPermission() now delegates to a PermissionEvaluator interface, with a default implementation provided by the Acl module. The contacts sample now uses expressions on the ContactManager interface. The permission-evaluator element on global-method-security can be used to set the instance to an AclPermissionEvaluator. If not set, all hasPermission() expressions will evaluate to 'false'.
2008-11-10 04:27:25 +00:00
Ben Alex
de897ad1ac SEC-867: Remove superfluous <property /> entry. 2008-06-05 22:51:47 +00:00
Luke Taylor
cf4072c517 Context file improvements (based on sts suggestions) 2008-05-25 20:57:07 +00:00
Luke Taylor
4f6b4e4bfd Make sample login pages use c:out for data output 2008-05-15 12:48:13 +00:00
Luke Taylor
d4defb10fe SEC-833: Fixed login-failure-url in contacts sample app. 2008-05-14 22:41:13 +00:00
Luke Taylor
fc498954c6 Updated sample context files to point at 2.0.1 schema 2008-05-01 17:51:48 +00:00
Luke Taylor
42cd91e259 Some updates to contacts sample to match description in docs, remove unnecessary cas code etc. 2008-04-12 18:08:35 +00:00
Ben Alex
677607bcad SEC-530: Refactor ACL module so ACE manipulation is index-based as
opposed to AccessControlEntry.getId() based.
2008-04-05 20:43:10 +00:00
Luke Taylor
8f7b216de3 Import cleaning, removal of unnecessary constructors etc based on eclipse warnings 2008-03-17 14:10:22 +00:00
Luke Taylor
8c00bb1537 SEC-674: Updated samples to work with new module layout. Changed taglib build to copy tld file to META-INF directory.
Also standardized JSTL version to 1.1.0 (impl 1.1.2), moving deps to root sample pom.
2008-02-22 16:21:37 +00:00
Luke Taylor
38237341b4 Removed unused getContactManager method 2008-02-15 18:06:59 +00:00
Luke Taylor
503e426707 Inlined destroyContext method. 2008-02-15 17:07:53 +00:00
Luke Taylor
be62979a01 Switch JSTL back to 1.1.2. 2008-02-15 12:15:20 +00:00
Luke Taylor
e2bf583fe9 Removed unused MessageSource from contacts app-context file. 2008-02-09 15:57:06 +00:00
Luke Taylor
dd47689687 Updated contact app to make more use of namespace configuration (now uses intercept-methods in target bean to set up method interceptor). 2008-02-09 15:41:29 +00:00
Luke Taylor
df1def412e Changed to using new alias for security filter chain in samples. 2008-02-01 14:28:04 +00:00
Luke Taylor
06f3bcbf6a Converted all namespace attributes which refer to bean IDs to use "-ref" suffix (or "ref"). 2008-01-22 20:58:12 +00:00
Luke Taylor
7d88ee8c48 Formatted ACL SQL for readability. 2008-01-21 18:35:22 +00:00
Luke Taylor
7583aca3eb Configured contacts app to use namespaces. Removed ldap, cas, x509 files to avoid confusion. Ldap and CAS will be better served by new samples. 2008-01-01 16:51:15 +00:00
Luke Taylor
b91e82d91c Changed _authenticationManager -> authenticationManager to get contact app tests passing again. 2007-12-25 00:34:28 +00:00
Luke Taylor
5f1eea42fc Moved configuration of security interceptors with access and authentication manangers from post processing stage to bean creation stage. 2007-12-23 16:40:29 +00:00
Luke Taylor
5e0cb21c8d SEC-619: Added test class for LdapUserDetailsService. The LdapAuthoritiesPopulator interface and also implementations have been moved to the org.springframework.security.ldap package since they are now used by both the ldap provider and the user service. 2007-12-09 18:40:28 +00:00
Ben Alex
cb765bc34b SEC-615: Automatically focus on login name HTML element on page load. 2007-12-03 06:34:43 +00:00
Ben Alex
7aa28ea742 SEC-614: Use DelegatingFilterProxy instead of FilterToBeanProxy. 2007-12-03 06:31:03 +00:00
Ben Alex
47229be5cb Make samples and tests use username "rod". 2007-12-03 02:56:52 +00:00
Ben Alex
3123d24337 SEC-613: Rename tag libraries. 2007-12-03 01:46:11 +00:00
Luke Taylor
9e2f372bad SEC-607: Deprecated InitialDirContextFactory and replaced it with SpringSecurityContextSource.
Also some refactoring of LdapUserDetailsManager to use a strategy for creating DNs from usernames.
2007-11-20 20:54:48 +00:00
Luke Taylor
03e285c31d Moved responsability for creating AuthenticationManager into AuthenticationProviderBeanDefinitionParser. Tidied up SecrityNamespaceHandler. 2007-10-25 14:21:45 +00:00
Luke Taylor
bd740a91a2 Corrected remember-me parameter name in samples and log file name in tutorial sample (was "contacts.log"). 2007-10-16 13:52:01 +00:00
Luke Taylor
3f2b9cd6fb SEC-562: More changes of Acegi name in comments, docs etc. 2007-10-03 14:02:39 +00:00
Luke Taylor
acb02246e0 Refactored embedded LDAP server tests to make use of new namespace configuration. Use Junit 4 annotations in preference to AbstractDependencyInjectionSpringContextTests so that it is possible to clear up the context after each class is run rather than at JVM shutdown (causes problems with running embedded apache DS). 2007-10-02 10:52:06 +00:00