Re: [smartweb-devel] [smartweb-auth] How to customize application gui by user's role

[Pino C. <gco...@gm...>]

Hi,
first of all , I completly agree with your request . We need to associate a
user 'function' to a role in a configuration file (xml format for best). It
was great your first solution proposed .
I propose an alternative scenario :
always in a gui it was wonder to write :
<auth valid : roles="myRoles1,myRoles2,.." > as a function to permitt
different cuncurrency roles .
or another solution <auth valid : groupId="devel" > were devel is a group of
distincts roles associate to a user . 
Waiting for reply..


Gaetano Perrone wrote:
> 
> Actually if we would visualize a button for the users in a "myRole" role
> on the application gui we must add a tag &lt;auth:valid role="myRole" 
> &gt; . This means that the business rules about user permission lie around
> the jsp source code, So if i would change the role permission strategy i
> must, in the worst case look around  all the jsp page.
> I think we could have the same approch used for the domain methods
> authentication (AOP) for determining if a button, a textfield, a label
> must be visualized. 
> I have detected 2 approchs:
> 
> 1. Add to the project an  &lt;auth:valid funtion="myFunction"  &gt; . This
> approch has the loss of needing the coding in all the authorized code
> blocks.
> 
> 2. Override struts html tags &lt;html:button id="myFunction" ...
> &lt;html:text id="myFunction" etc...
> 
> waiting for your feedback
> 

-- 
View this message in context: http://www.nabble.com/-smartweb-auth--How-to-customize-application-gui-by-user%27s-role-tp14876789s17546p14877928.html
Sent from the SmartWeb Developers mailing list archive at Nabble.com.