Re: Webobjects-dev Digest, Vol 2, Issue 479
Re: Webobjects-dev Digest, Vol 2, Issue 479
- Subject: Re: Webobjects-dev Digest, Vol 2, Issue 479
- From: Daniel Mejia <email@hidden>
- Date: Fri, 19 Aug 2005 18:08:30 -0500
I'm trying to implement a security framework to restrict the access to
some user and have some way to handle ACL. You mentioned that there is
a security framework example. Could you point me where can I get this
example? Your modifications are open source?
Thanks in advance.
Daniel Mejia.
On Aug 11, 2005, at 12:01 PM, email@hidden
wrote:
Date: Thu, 11 Aug 2005 11:50:38 -0400
From: Robert Walker <email@hidden>
Subject: Re: Several newbish questions
To: Jerome Chan <email@hidden>
Cc: Apple Webobjects List <email@hidden>
Message-ID: <email@hidden>
Content-Type: text/plain; charset="us-ascii"
1. I would like to implement some form of security on my app. On
some forms only User Type A can access. On other forms User Type B.
I am currently checking the User Type when the form is submitted
but that requires me to call my security check method once
manually. Is there a way to automatically check this? I was looking
at the api for WOApplication and pageWithName(). Would this be the
correct spot to implement this?
I personally use David Neumann's security example framework for all
my authentication needs. It supports a number of features not
available in many authentication examples I've seen in WO books. It
support things like "on-demand login" including access protection for
direct actions, multiple credential gathering support including HTML
page, HTTP panel, and Certificate authentication. The framework also
contains an implementation of Access Control Lists (ACL) for
attribute level protection of enterprise objects.
Contact me off-list if you are interested in taking a look at it.
I've updated the frameworks to work properly with WO 5.2.4 and seems
to work fine with WO 5.3 as well (preliminary testing only).
J. Daniel Mejia S.
Evolution Technologies, S.A. de C.V.
Teléfono: (81) 8349.5780
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden