Re: [smartweb-devel] [smartweb-auth] How to customize application gui by user's role

[Gaetano P. <gpe...@sm...>]

I think u don't understand the solution i propose.
The xml configuration file that associates user's role to function yet
exists and was introduced with AOP domain methods authentication.
The solution u propose ( <auth:valid role="role1" ) also exists yet but
what i would avoid to specify the role in the jsp page parametrizing it by
function name and configured (xml & AOP) role-function association. The
advantage as i said in the previous post is that changing the role's
function associate impacts only at configuration time and we must'nt need
rediting N jsp pages source code
:-)


Pino Contartese wrote:
> 
> Hi,
> first of all , I completly agree with your request . We need to associate
> a user 'function' to a role in a configuration file (xml format for best).
> It was great your first solution proposed .
> I propose an alternative scenario :
> always in a gui it was wonder to write :
> <auth valid : roles="myRoles1,myRoles2,.." > as a function to permitt
> different cuncurrency roles .
> or another solution <auth valid : groupId="devel" > were devel is a group
> of distincts roles associate to a user . 
> Waiting for reply..
> 
> 
> Gaetano Perrone wrote:
>> 
>> Actually if we would visualize a button for the users in a "myRole" role
>> on the application gui we must add a tag &lt;auth:valid role="myRole" 
>> &gt; . This means that the business rules about user permission lie
>> around the jsp source code, So if i would change the role permission
>> strategy i must, in the worst case look around  all the jsp page.
>> I think we could have the same approch used for the domain methods
>> authentication (AOP) for determining if a button, a textfield, a label
>> must be visualized. 
>> I have detected 2 approchs:
>> 
>> 1. Add to the project an  &lt;auth:valid funtion="myFunction"  &gt; .
>> This approch has the loss of needing the coding in all the authorized
>> code blocks.
>> 
>> 2. Override struts html tags &lt;html:button id="myFunction" ...
>> &lt;html:text id="myFunction" etc...
>> 
>> waiting for your feedback
>> 
> 
> 

-- 
View this message in context: http://www.nabble.com/-smartweb-auth--How-to-customize-application-gui-by-user%27s-role-tp14876789s17546p14896449.html
Sent from the SmartWeb Developers mailing list archive at Nabble.com.