[Acegisecurity-developer] Is the "ROLE_" prefix required for all roles?

Hi All, I've been mucking around Acegi for a few days now and I'm curious the the "ROLE_" prefix, that, as far as I can tell is mandatory. Can anyone confirm this? If I make my role deffinitions look like "/secure/**=ROLE_BLOGGER" it seems to work fine, but if I specifiy a role of "/secure/**=BLO

Re: [Acegisecurity-developer] Is the "ROLE_" prefix required for all roles?

Daniel Washusen wrote: Hi All, I've been mucking around Acegi for a few days now and I'm curious the the "ROLE_" prefix, that, as far as I can tell is mandatory. Can anyone confirm this? If I make my role deffinitions look like "/secure/**=ROLE_BLOGGER" it seems to work fine, but if I specifiy a r

Re: [Acegisecurity-developer] Is the "ROLE_" prefix required for all roles?

Hi, When you want to use the net.sf.acegisecurity.vote.RoleVoter you must use this prefix (unless you create a subclass of RoleVoter working with some differet prefix, but it doesn't make sence to do this). You can have any other config attribute names for your custom voters. I imagine that you a

Re: [Acegisecurity-developer] Tapestry <-> Acegi integration

Hi, It seems there is no effort in this area, so I'm wondering about creating and publishing a simplified version of my application (Hibernate, Spring + Acegi security, Tapestry) to demonstrate this. I don't have and don't need any special Tapestry Acegi integration classes. Except a few classes w

Re: [Acegisecurity-developer] Is Authentication not really Serializable?

On Tue, 13 Jul 2004 08:40:09 +1000, Ben Alex <[EMAIL PROTECTED]> wrote: > Hi Patrick > > I've just made Authentication Serializable in CVS HEAD. > > Best regards > Ben > Ben, Thank you very much. Going to test it out today. Any ideas on the schedule for 0.6? Thanks, Patrick --

RE: [Acegisecurity-developer] Is Authentication not really Serializable?

Ben, I was wondering if the context variable in DaoAuthenticationProvider could be made protected or better yet, have a getContext() method. Sub classes extending the provider then can provide their own custom events if necessary. Thanks Shishir -Original Message- From: [EMAIL PROTE

RE: [Acegisecurity-developer] Is Authentication not really Serializable?

Same goes for forcePrincipalAsString. -Original Message- From: Shishir K. Singh Sent: Tuesday, July 13, 2004 10:15 AM To: '[EMAIL PROTECTED]' Subject: RE: [Acegisecurity-developer] Is Authentication not really Serializable? Ben, I was wondering if the context variable in DaoAuthen

Re: [Acegisecurity-developer] CasAuthenticationProvider taking advantage of custom Authentication object?

Ben, > Option one is preferable in the likely case most people would use the > DAO authentication provider package. In fact I've not heard of anyone > using Acegi Security with anything but the DAO authentication provider > package. Furthermore, the linkage is not very significant anyway, being >

Re: [Acegisecurity-developer] Is the "ROLE_" prefix required for all roles?

I'm doing something similar in my AuthenticationDao implementation. Since all the roles are stored in the DB without the "ROLE_" prefix (and usually in lower case), I simply convert them in my Dao before returning to Acegi: --- public User loadUserByUsername(final String username) throws User

[Acegisecurity-developer] Why am I getting extra requests with Sitemesh?

I posted the following question to the Sitemesh list. Thought I would see if anyone here also had any experience getting Acegi and Sitemesh to play nice together. - Hello all, I am working on an project that is using Sitemesh for decorating pages. I am also using the

[Acegisecurity-developer] Followup: Why am I getting extra requests with Sitemesh?

Well, I figured out why I am getting extra requests. Weblogic reruns the filters when RequestDispatcher.include() is invoked. SiteMesh does this in its PageFilter class. I have noticed a work around for this silly behavior (which becomes configurable in the 2.4 servlet spec) in the SiteMesh code.

[Acegisecurity-developer] Re: Acegi Security

Hi Mark [EMAIL PROTECTED] wrote: Ben, I have been a Spring user for sometime now and am starting to investigate Acegi Security. I am having trouble replying to the developer-list subscription so I thought that I would email you directly if you do not mind this once. My reply to the subscription k

Re: [Acegisecurity-developer] Is Authentication not really Serializable?

Hi Shishir Shishir K. Singh wrote: Same goes for forcePrincipalAsString. There is already an isForcePrincipalAsString() method. -Original Message- From: Shishir K. Singh Sent: Tuesday, July 13, 2004 10:15 AM To: '[EMAIL PROTECTED]' Subject: RE: [Acegisecurity-developer] Is Authentica

Re: [Acegisecurity-developer] Is Authentication not really Serializable?

Patrick Burleson wrote: Thank you very much. Going to test it out today. Any ideas on the schedule for 0.6? Hi Patrick Acegi Security 0.6 will be released very soon. I'm just awaiting a Spring 1.1 RC to check everything still works. Best regards Ben ---

Re: [Acegisecurity-developer] Why am I getting extra requests with Sitemesh?

Patrick Burleson wrote: I posted the following question to the Sitemesh list. Thought I would see if anyone here also had any experience getting Acegi and Sitemesh to play nice together. - Hello all, I am working on an project that is using Sitemesh for decorating pages.

Re: [Acegisecurity-developer] is there support for Hibernate?

Indra Gunawan wrote: Hi all, I want to implement the security authentication using Hibernate? But seems that I can't find one class that support it should I extends from HibernateDaoSupport class of Spring framework and implements AuthenticationDao ? or do I miss the support class ? TIA Indra

Re: Re: [Acegisecurity-developer] Why am I getting extra requests with Sitemesh?

On Wed, 14 Jul 2004 08:16:51 +1000, Ben Alex <[EMAIL PROTECTED]> wrote: > > > Patrick Burleson wrote: > > >I posted the following question to the Sitemesh list. Thought I would > >see if anyone here also had any experience getting Acegi and Sitemesh > >to play nice together. > > > >-

Re: [Acegisecurity-developer] Followup: Why am I getting extra requests with Sitemesh?

Patrick Burleson wrote: Well, I figured out why I am getting extra requests. Weblogic reruns the filters when RequestDispatcher.include() is invoked. SiteMesh does this in its PageFilter class. I have noticed a work around for this silly behavior (which becomes configurable in the 2.4 servlet spec)

RE: [Acegisecurity-developer] Is Authentication not really Serializable?

Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben Alex Sent: Tuesday, July 13, 2004 6:10 PM To: [EMAIL PROTECTED] Subject: Re: [Acegisecurity-developer] Is Authentication not really Serializable? Hi Shishir Shishir K. Singh wrote: >Same goes

Re: [Acegisecurity-developer] Is the "ROLE_" prefix required for all roles?

Thanks guys, yeah, I ended up adding the "ROLE_" to my roles in the AuthenticationDAO implementation. It might be worth making the error message that gets thrown a little more informative. "Unsupported configuration attributes: [BLOGGER]" had me scratching my head. Cheers and thanks for the hel