Re: Role-based security and widget visualization

2010-07-05 Thread Ladislav Gazo
acris-security depends on some core modules and tries to be as separated as it is possible. It is designed to fit into (hopefully) any environment but currently we have integration with Spring Security only. Nevertheless we are open to any discussion regarding extensions. The client is built in

Re: Role-based security and widget visualization

2010-07-03 Thread KaiWeing
Hello Ladislav, looks interesting! Could you answer me a few questions: Is it correct, that I can use acris security independently of the other acris modules? Does it require Spring Security on the server side, or could I use something else? Are the restricted ui parts still transported to the

Re: Role-based security and widget visualization

2010-07-02 Thread Ladislav Gazo
Hey Kai, there is a toolkit called AcrIS (http://acris.googlecode.com/) where one of it's part is denoted to security - acris-security module (http://code.google.com/p/acris/wiki/Security). It handles client and server security. On the client it is using annotations or manually specified

Re: Role-based security and widget visualization

2010-07-02 Thread Ladislav Gazo
Hey Kai, there is a toolkit called AcrIS (http://acris.googlecode.com/) where one of it's part is denoted to security - acris-security module (http://code.google.com/p/acris/wiki/Security). It handles client and server security. On the client it is using annotations or manually specified

Re: Role-based security and widget visualization

2010-07-02 Thread Ladislav Gazo
Hey Kai, there is a toolkit called AcrIS (http://acris.googlecode.com/) where one of it's part is denoted to security - acris-security module (http://code.google.com/p/acris/wiki/Security). It handles client and server security. On the client it is using annotations or manually specified

Role-based security and widget visualization

2010-07-01 Thread KaiWeing
Hello, we are evaluating GWT as a basis for different kinds of enterprise applications we have here. Some of those have controls which must only be displayed for users in a certain role, also, the decision which controls to display must be made at serverside, to avoid clientside manipulation.

Re: Role-based security and widget visualization

2010-07-01 Thread Paul Robinson
Just make sure that your server applies controls over who can read/write what data. You have absolute control over the server, so you can maintain appropriate security there. Then it doesn't matter so much from a security standpoint whether the client is capable of displaying inappropriate widgets