Re: [appengine-java] Apache Shiro on Google App Engine

2011-07-15 Thread objectuser
As far as I know, there's nothing that prevents the conditionals throughout 
the code.  Fortunately, with GWT, you're basically coding in Java, so all of 
the patterns you're used to for reducing the number of conditionals in your 
code should apply in the same way (basically, polymorphism through 
factories, etc.).

-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-appengine-java/-/t66wciLWpgIJ.
To post to this group, send email to google-appengine-java@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.



Re: [appengine-java] Apache Shiro on Google App Engine

2011-07-14 Thread Aswath Satrasala
Hi,
How do you handle the security/authorizations on GWT layer.

-Aswath
www.AccountingGuru.in

On Wed, Jul 13, 2011 at 5:59 AM, objectuser kevin.k.le...@gmail.com wrote:

 If anyone is interested, I've posted a short guide to using Apache Shiro on
 Google App Engine:


 http://objectuser.wordpress.com/2011/06/30/apache-shiro-on-google-app-engine/

 It focuses on my current stack, which includes Google Guice.  I also use
 GWT, but that should mostly be irrelevant.

 --
 You received this message because you are subscribed to the Google Groups
 Google App Engine for Java group.
 To view this discussion on the web visit
 https://groups.google.com/d/msg/google-appengine-java/-/Y2s1I4sg07AJ.
 To post to this group, send email to
 google-appengine-java@googlegroups.com.
 To unsubscribe from this group, send email to
 google-appengine-java+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/google-appengine-java?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To post to this group, send email to google-appengine-java@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.



Re: [appengine-java] Apache Shiro on Google App Engine

2011-07-14 Thread objectuser
Well, on the client (browser), there's no security at all.  Security (that 
is, protecting your site from the user), is impossible.  If you just mean 
disabling buttons or changing parts of the page, then you can just pass back 
permissions to do that.  It doesn't guarantee anything, of course.

If you mean on the server, GWT requests are web requests.  So you intercept 
them with the filter (shown in my post).

If you mean something else, let me know.

-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-appengine-java/-/U6-P-0mm1HkJ.
To post to this group, send email to google-appengine-java@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.



Re: [appengine-java] Apache Shiro on Google App Engine

2011-07-14 Thread Aswath Satrasala
On Fri, Jul 15, 2011 at 6:43 AM, objectuser kevin.k.le...@gmail.com wrote:

 Well, on the client (browser), there's no security at all.  Security (that
 is, protecting your site from the user), is impossible.  If you just mean
 disabling buttons or changing parts of the page, then you can just pass back
 permissions to do that.  It doesn't guarantee anything, of course.

Yes, permissions can be passed back to the client side.  With the help of
permission, buttons can be enabled and disabled atleast for normal users.
However, I imagine there will be lot of 'ifs' and 'else' in the code. Is
there any structured pattern/library that can be followed here.

If you mean on the server, GWT requests are web requests.  So you intercept
 them with the filter (shown in my post).


 If you mean something else, let me know.


-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To post to this group, send email to google-appengine-java@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.



[appengine-java] Apache Shiro on Google App Engine

2011-07-12 Thread objectuser
If anyone is interested, I've posted a short guide to using Apache Shiro on 
Google App Engine:

http://objectuser.wordpress.com/2011/06/30/apache-shiro-on-google-app-engine/

It focuses on my current stack, which includes Google Guice.  I also use 
GWT, but that should mostly be irrelevant.

-- 
You received this message because you are subscribed to the Google Groups 
Google App Engine for Java group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-appengine-java/-/Y2s1I4sg07AJ.
To post to this group, send email to google-appengine-java@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.