Re: Rule to access security
Re: Rule to access security
- Subject: Re: Rule to access security
- From: Theodore Petrosky <email@hidden>
- Date: Tue, 24 Jan 2012 08:24:02 -0800 (PST)
Is there a framework that must be linked in for this to work? As soon as I us it like this:
100 : (pageConfiguration = 'ListPerson' and session.user.security.canEditPerson = 'true') => isEntityEditable = true [er.directtoweb.assignments.delayed.ERDDelayedBooleanAssignment],
or:
100 : (pageConfiguration = 'ListPerson' and session.user.security.canEditPerson = 'false') => isEntityEditable = false [ERDDelayedBooleanAssignment],
All of my rules are ignored with this error:
Jan 24 11:14:27 NewTest[62682] WARN NSLog - ** DirectToWeb could not read user.d2wmodel file: file:/Users/asacksadmin/Documents/workspaceD2W_3/NewTest/Resources/user.d2wmodel
[2012-1-24 11:14:27 EST] <main> java.lang.ClassCastException: java.lang.String cannot be cast to com.webobjects.foundation.NSDictionary
at er.directtoweb.assignments.delayed.ERDDelayedBooleanAssignment.dependentKeys(ERDDelayedBooleanAssignment.java:71)
at er.directtoweb.ERD2WModel.prepareDataStructures(ERD2WModel.java:462)
at er.directtoweb.ERD2WModel.sortRules(ERD2WModel.java:192)
at com.webobjects.directtoweb.D2WModel.setRules(D2WModel.java:1127)
at com.webobjects.directtoweb.D2WModel.<init>(D2WModel.java:428)
at er.directtoweb.ERD2WModel.<init>(ERD2WModel.java:143)
at er.directtoweb.ERD2WModel.mergePathURL(ERD2WModel.java:609)
at com.webobjects.directtoweb.D2WModel.loadRules(D2WModel.java:982)
at com.webobjects.directtoweb.D2WModel.checkRules(D2WModel.java:907)
at er.directtoweb.ERDirectToWeb.finishInitialization(ERDirectToWeb.java:98)
at er.extensions.ERXFrameworkPrincipal$Observer.willFinishInitialization(ERXFrameworkPrincipal.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
what am i missing?
Ted
--- On Mon, 1/23/12, David LeBer <email@hidden> wrote:
> From: David LeBer <email@hidden>
> Subject: Re: Rule to access security
> To: "Theodore Petrosky" <email@hidden>
> Cc: email@hidden
> Date: Monday, January 23, 2012, 10:46 AM
> Ted,
>
> You probably want try ERDDelayedBooleanAssignment so that
> the rule is evaluated every time.
>
> D
>
> --
> David LeBer
> Codeferous Software
>
> On 2012-01-23, at 10:29 AM, Theodore Petrosky wrote:
>
> > 100 : (pageConfiguration = 'ListPerson'
> and session.user.security.canEditPerson = 'true') =>
> isEntityEditable = true
> [com.webobjects.directtoweb.BooleanAssignment],
> >
> >
> > So I have this rule to access the security of my user.
> This must be wrong, because if I login as user1 and user1
> has permission canEditPerson = true, when user2 logs
> in (and user2 canEditPeron = false) then user2 can edit the
> person EO. it is as if whoever was first wins and my app
> remembers.
> >
> > I even tried adding:
> > 100 : (pageConfiguration = 'ListPerson'
> and session.user.security.canEditPerson = 'false') =>
> isEntityEditable = false
> [com.webobjects.directtoweb.BooleanAssignment],
> >
> > What am I doing wrong?
> >
> > Ted
> > _______________________________________________
> > Do not post admin requests to the list. They will be
> ignored.
> > Webobjects-dev mailing list (email@hidden)
> > Help/Unsubscribe/Update your Subscription:
> >
> > This email sent to email@hidden
> >
>
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden