Stack Overflow
Stack Overflow

Questions tagged [security-roles]

121 questions
26
votes
6 answers

How to dynamically decide access attribute value in Spring Security?

In Spring Security we use the intercept-url tag to define the access for URLs as below: This is hard coded in…
Cracker
  • 1,730
  • 4
  • 24
  • 32
21
votes
1 answer

CakePHP ACL Database Setup: ARO / ACO structure?

I'm struggling to implement ACL in CakePHP. After reading the documentation in the cake manual as well as several other tutorials, blog posts etc, I found Aran Johnson's excellent tutorial which has helped fill in many of the gaps. His examples…
user5564
15
votes
2 answers

Using C# to get a list of ACLs for Servers and mapped drives

The production change implementers for our IT group have been tasked with reviewing the security for all of the various objects in our group, primarily to make sure that people who have left our employ or have transferred to other groups no longer…
bdwakefield
  • 675
  • 2
  • 12
  • 23
15
votes
2 answers

Spring Security / Java EE solutions for hierarchy tree roles

I know Spring Security is good for standard role and permission based authorisation. What I'm not sure is this scenario: There are 10,000 employees managed in the system, employees organised into an org chart (a tree of who reports to who across…
qtach
  • 153
  • 7
14
votes
2 answers

users assigned a sql azure role

I am trying to make sure that all users have been assigned a particular role. Is there any view or SQL query for getting this information?
user682732
  • 171
  • 1
  • 5
10
votes
1 answer

How do the CloudKit security roles and permissions work?

There are three default security roles in CloudKit: World Authenticated Creator And three permissions: Create Read Write How do these security roles and permissions work? Here are examples of some of the questions I would hope get answered by…
Senseful
  • 73,679
  • 56
  • 267
  • 405
8
votes
2 answers

What is the difference between ROLE_USER and ROLE_ANONYMOUS in a Spring intercept url configuration?

What is the difference between ROLE_USER and ROLE_ANONYMOUS in a Spring intercept url configuration such as the example below? …
pnut butter
  • 367
  • 2
  • 4
  • 12
7
votes
1 answer

LDAP authorization

I'm starting to implement authorization and authentication mechanism using LDAP, for some existing system. On the development stage, I'm facing a difficult design decision: where should user roles be stored? If I used RDBMS, it looks like there will…
Tioma
  • 2,070
  • 7
  • 33
  • 52
7
votes
9 answers

Preferred database design method for assigning user roles? (Hats vs. Groups)

I have medium sized MySQL database with a primary "persons" table which contains basic contact information about every human being connected to the theatre and theatre school for which I am responsible for maintaining and developing a number of web…
notneilcasey
  • 141
  • 1
  • 6
7
votes
1 answer

LDAP for Application Access Control, how much should it control?

A precursor: I've worked now in two enviroments with conflicting principals on this. I am outlining the competing ideas and would like to know which is 'correct' given the scenario described. Scenario: Multiple applications exist on our intranet. We…
CogitoErgoSum
  • 2,589
  • 5
  • 28
  • 40
7
votes
1 answer

Why do I list security roles in web.xml when they're in jdbcRealm database?

I run JavaEE 6 web application on Glassfish 3. I use JAAS with jdbcRealm and default principal to role mapping. In my database I have table for mapping usernames to their roles: username | role ----------+------- john | admin mary |…
karolkpl
  • 2,109
  • 9
  • 36
  • 58
7
votes
7 answers

Determine if user can access the requested page?

I have an ASP.Net website with multiple roles, each with access to a separate directory (i.e. admin users can access /admin, shoppers can access /shop etc), using a shared login page. If someone visits the login page with the return URL set to a…
user9659
  • 771
  • 1
  • 8
  • 19
5
votes
2 answers

AuthorizeAttribute with Roles but not hard-coding the Role values

Is it possible to add the Roles but not hard-coding the values like: [Authorize(Roles="members, admin")] I would like to retrieve these roles from a database or configuration file where I wouldn't need to rebuild the application if I needed to…
zeb ula
  • 175
  • 2
  • 11
5
votes
3 answers

Unit Test(mvc) -problem with Roles

I have mvc application and I'm working with poco objects and writing unit test. Problem is that all my test fail when they reach this line of code Roles.IsUserInRole("someUser", "role"). Should I implement new interface or repository for Roles…
Cipiripi
  • 1,103
  • 5
  • 16
  • 33
4
votes
5 answers

How do I access JAAS roles at arbitrary point in the code?

I want to access the full model of users with their roles in my SOAP app. For example, I might want to know the role of a user called "Fred." How do I reach into some sort of global JAAS registry and do (pseudocode) …
Joshua Fox
  • 15,727
  • 14
  • 65
  • 108
1
2 3
…
8 9