Re: User roles in GWT applications

2011-03-08 Thread Lukasz
UserMgr is a simple class containing the functionality needed for the UI to do the roles checks, login & logout user etc. The list of roles assigned to the user is not a part of the UserMgr itself but it's a property of the User entity -a simple HashSet to be precise. The UserMgr has a property cal

Re: User roles in GWT applications

2011-03-08 Thread csaffi
I'm also considering java security frameworks like Apache Shiro and Spring Security... What do you think about them? -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to google-web-toolkit@googlegroups.com.

Re: User roles in GWT applications

2011-03-07 Thread Antonio Blanco Alzola
The project looks promising, but I wasn't able to get acris-security to work I include acris-security-core 1.1.1-SNAPSHOT as a maven dependency the way they explain on their wiki (no exactly the same because acris-security doesn-t exist, I had to use acris-security-core) but when I add the fol

Re: User roles in GWT applications

2011-03-07 Thread csaffi
Thank you Lukasz. > In my app I'm doing the security checks on the client- as well as on > the server-side. After the user successfully logged into the app, the > UserManager containes among other things a set of roles which are > assigned to the current user enabling the role-checks without any r

Re: User roles in GWT applications

2011-03-03 Thread Lukasz
In my app I'm doing the security checks on the client- as well as on the server-side. After the user successfully logged into the app, the UserManager containes among other things a set of roles which are assigned to the current user enabling the role-checks without any rpc- callbacks. The client c

Re: User roles in GWT applications

2011-03-02 Thread Ben Imp
Depends on the situation, but in general its much easier on users if things they can't do/edit aren't shown to them. Or, alternatively, if they are shown, be shown with some visual indicator of restricted access. A panel full of blank values with no UI feedback is somewhat unintuitive. A panel w

Re: User roles in GWT applications

2011-03-02 Thread csaffi
On 2 Mar, 16:41, Ben Imp wrote: > This is basically what I have implemented in my system as well.  Our > user roles are in the DB and I keep a copy on the client so all of the > presenters can inspect it to see what the user can do. > > I should mention that double-checking the permissions on the

Re: User roles in GWT applications

2011-03-02 Thread csaffi
On 2 Mar, 14:31, Lukasz wrote: > I'm doing it by providing a self-implemented UserManager object on the > client. It contains the currently signed in user and provides methods > for access or role checks e.g. canEditUser(). This UserManager object > is an singleton injected via gin into all releva

Re: User roles in GWT applications

2011-03-02 Thread zixzigma
if using GWT Activities, do you think it is better to perform the check in Activities themselves or in ActivityMappers (or ActivityFactories) ? -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to google-we

Re: User roles in GWT applications

2011-03-02 Thread zixzigma
could you please explain, why the check on client-side is necessary, if the server does the check ? and on the client-side, do you mean having a UserRoles object, which contains user's permission ? Thank You -- You received this message because you are subscribed to the Google Groups "Google

Re: User roles in GWT applications

2011-03-02 Thread Ben Imp
kasz > > On 1 Mrz., 18:47, csaffi wrote: > > > Hi everybody, > > I'm wondering if you could suggest me any way to implement "user > > roles" in GWT applications. I would like to implement a GWT > > application where users log in and are assigned "roles

Re: User roles in GWT applications

2011-03-02 Thread Lukasz
x27;m also using the MVP pattern in my app). When the presenter is rendering the view, it can check which functionality should be enabled or disabled. HTH, Lukasz On 1 Mrz., 18:47, csaffi wrote: > Hi everybody, > I'm wondering if you could suggest me any way to implement "user >

Re: User roles in GWT applications

2011-03-02 Thread csaffi
A possible solution could be to make an RPC call to the server during onModuleLoad. This RPC call would generate the necessary Widgets and/ or place them on a panel and then return this panel to the client end. What do you think about this? -- You received this message because you are subscribed

Re: User roles in GWT applications

2011-03-01 Thread André Salvati
What do you think about this one? http://code.google.com/p/acris/wiki/Security -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to google-web-toolkit@googlegroups.com. To unsubscribe from this group, send

Re: User roles in GWT applications

2011-03-01 Thread saida dhanavath
ement "user > roles" in GWT applications. I would like to implement a GWT > application where users log in and are assigned "roles". Based on > their role, they would be able to see and use different application > areas. > > Thank you very much in advance for your

Re: User roles in GWT applications

2011-03-01 Thread zixzigma
I am also interested in finding a decent solution for this. -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to google-web-toolkit@googlegroups.com. To unsubscribe from this group, send email to google-web

User roles in GWT applications

2011-03-01 Thread csaffi
Hi everybody, I'm wondering if you could suggest me any way to implement "user roles" in GWT applications. I would like to implement a GWT application where users log in and are assigned "roles". Based on their role, they would be able to see and use different applicati