[Acegisecurity-developer] Using a corporate authentication with Acegi

2004-07-19 Thread Stefan D Sookraj
All, I am trying to integrate Spring /Acegi into a critical application. Our company has common web authentication mechnism that we need to use for authentication. It basically set the REMOTE_USER variable in the http request. I can use request.getRemoteUser or request.getUserPrincipal() to r

Re: [Acegisecurity-developer] Using a corporate authentication with Acegi

2004-07-19 Thread Stefan D Sookraj
<[EMAIL PROTECTED]> Subject: Re: [Acegisecurity-developer] Using a corporate authentication with Acegi Stefan D Sookraj wrote: > All, > I am trying to integrate Spring /Acegi into a critical application. > Our company has common web authentication mechnism that we need to use >

Re: [Acegisecurity-developer] Using a corporate authentication with Acegi

2004-07-20 Thread Stefan D Sookraj
Alex <[EMAIL PROTECTED]> Subject: Re: [Acegisecurity-developer] Using a corporate authentication with Acegi Stefan D Sookraj wrote: >I do have one question, is there a diagram or >pictorial representation of the components for Acegi? Thank you. > > Unfortunately there is no dia

Re: [Acegisecurity-developer] Instance based security

2004-07-22 Thread Stefan D Sookraj
Can't this be done such using Method Security MethodInvocation security in Acegi? Not sure how you know it is a CEO employee declaratively though. I guess this is what you are asking.   like: sample.Employee.getSalary=ROLE_MANAGER sample.Employee.getAddress=ROLE_ALL   Sorry, I know the example

Re: [Acegisecurity-developer] Instance based security

2004-07-22 Thread Stefan D Sookraj
Actually, that is exactly what I was stating. He needs to know whether an employee is a CEO or a regular employee since both use the same Employee object. What I was eluding to is that currently, even if you added a property in the Employee object to determine if it is a CEO or not, I was no

[Acegisecurity-developer] Authentication challenge twice (using ACEGI)

2004-07-25 Thread Stefan D Sookraj
Does anyone know how to avoid being challenge twice in the following scenario: (I am using ACEGI with my companies authentication mechanism which pops up the 401 login prompt and if successful set the REMOTE_USER. I then have a custom ACEGI provider than checks for this.) When a user clicks on