[Jboss-dev-forums] [Design of Security on JBoss] - Re: Generalizing the JACC service

[<ani...@jb...>]

Scott, currently the PolicyConfiguration.linkConfiguration is not complete because it fails to link the internal ContextPolicy. (It is not implemented)

Here is a basic implementation that I did in the portal jacc layer (forked jacc layer).


  | ContextPolicy.java
  | 
  | void linkConfiguration(ContextPolicy link)
  |       throws PolicyContextException
  |    { 
  |       Enumeration en = this.excludedPermissions.elements();
  |       while(en != null && en.hasMoreElements())
  |          link.excludedPermissions.add((Permission)en.nextElement());
  |       
  |       en = this.uncheckedPermissions.elements();
  |       while(en != null && en.hasMoreElements())
  |          link.uncheckedPermissions.add((Permission)en.nextElement()); 
  |       if(!rolePermissions.isEmpty())
  |         link.rolePermissions.putAll(rolePermissions); 
  |    }
  | 

Basically the perms and roles from the parent get added into the child.

This worked for my usecase.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3919698#3919698

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3919698