Re: Roles and permissions

2008-06-24 Thread Sergey Beryozkin
Hi John Agreed, it would be worth documenting on how to access the context infomation when combining JAX-WS and JAX-RS. There're 2 variations but the advice would be probably the same. Case 1. JAX-WS invocation is mapped to methodA, while JAX-RS invocation is mapped to methodB. For ex : void

Re: Roles and permissions

2008-06-24 Thread John-M Baker
AIL PROTECTED]> 23/06/2008 17:53 Please respond to users@cxf.apache.org To users@cxf.apache.org cc Subject Re: Roles and permissions Right. The point is that JAX-WS will not inject a security context, ever. It's not a jax-ws concept. It will inject a WebServiceContext object whi

Re: Roles and permissions

2008-06-23 Thread Daniel Kulp
iel Kulp <[EMAIL PROTECTED]> 23/06/2008 15:29 Please respond to users@cxf.apache.org To users@cxf.apache.org cc Subject Re: Roles and permissions You probably will need to split it into two methods, one that takes the JAX-RS SecurityContext and one that doesn't and instead uses

Re: Roles and permissions

2008-06-23 Thread John-M Baker
re you guys > have a better idea! > > > > John Baker > -- > Web SSO > IT Infrastructure > Deutsche Bank London > > URL: http://websso.cto.gt.intranet.db.com > > > > > Daniel Kulp <[EMAIL PROTECTED]> > 23/06/2008 15:29 > Pl

Re: Roles and permissions

2008-06-23 Thread John-M Baker
have a better idea! John Baker -- Web SSO IT Infrastructure Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com Daniel Kulp <[EMAIL PROTECTED]> 23/06/2008 15:29 Please respond to users@cxf.apache.org To users@cxf.apache.org cc Subject Re: Roles and permissions

Re: Roles and permissions

2008-06-23 Thread Daniel Kulp
e Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com "Sergey Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 15:13 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions *Shortly, the following form of injection will also be suppor

Re: Roles and permissions

2008-06-23 Thread John-M Baker
Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 15:13 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions >> *Shortly, the following form of injection will also be supported* : Does it answer your question ? Cheers, Sergey >> >&

Re: Roles and permissions

2008-06-23 Thread Sergey Beryozkin
Baker > -- > Web SSO > IT Infrastructure > Deutsche Bank London > > URL: http://websso.cto.gt.intranet.db.com > > > > > John-M Baker <[EMAIL PROTECTED]> > 23/06/2008 12:08 > Please respond to > users@cxf.apache.org > > > To > users@cxf.a

Re: Roles and permissions

2008-06-23 Thread John-M Baker
r > > -- > > Web SSO > > IT Infrastructure > > Deutsche Bank London > > > > URL: http://websso.cto.gt.intranet.db.com > > > > > > > > > > John-M Baker <[EMAIL PROTECTED]> > > 23/06/2008 12:08 > > Please respond to &

Re: Roles and permissions

2008-06-23 Thread John-M Baker
REST and WS supported this formality. John Baker -- Web SSO IT Infrastructure Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com "Sergey Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 14:22 Please respond to users@cxf.apache.org To cc Subject Re: Roles and

Re: Roles and permissions

2008-06-23 Thread Sergey Beryozkin
Any thoughts? John Baker -- Web SSO IT Infrastructure Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com "Sergey Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 11:20 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions Yes, I don't

Re: Roles and permissions

2008-06-23 Thread John-M Baker
apache.org To users@cxf.apache.org cc users@cxf.apache.org Subject Re: Roles and permissions Sergey, Thanks for your feedback, and congratulations on the new 2.1.1. release of CXF. I'm using this release I can not get access to the ServletContext or SecurityContext within a bean when cal

Re: Roles and permissions

2008-06-23 Thread John-M Baker
ergey Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 11:20 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions Yes, I don't remember offhand how, have a look at the JAX-WS docs please, I think it can be injected through a field or through a setter. P

Re: Roles and permissions

2008-06-23 Thread John-M Baker
-- Web SSO IT Infrastructure Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com "Sergey Beryozkin" <[EMAIL PROTECTED]> 23/06/2008 11:20 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions Yes, I don't remember offhand how, have

Re: Roles and permissions

2008-06-23 Thread Sergey Beryozkin
ECTED]> To: Sent: Monday, June 23, 2008 9:36 AM Subject: Re: Roles and permissions And how is that done? Via a set method of some kind? John Baker -- Web SSO IT Infrastructure Deutsche Bank London URL: http://websso.cto.gt.intranet.db.com Daniel Kulp <[EMAIL PROTECTED]> 20/06/2

Re: Roles and permissions

2008-06-23 Thread John-M Baker
ect Re: Roles and permissions On Jun 20, 2008, at 11:23 AM, John-M Baker wrote: > Hi, > > What was the solution to this problem? Only apply it to the REST > service? > Will a future release of CXF fix it for SOAP? > Well, JAX-WS has it's own security stuff.Thus

Re: Roles and permissions

2008-06-20 Thread Daniel Kulp
t Re: Roles and permissions On Jun 18, 2008, at 9:38 AM, Sergey Beryozkin wrote: Hi, If so then I'd assuem it's something which needs to be fixed in a jaxws asm processor, as this method Response getApplicationConfiguration(@PathParam("id") String id, @Context Securi

Re: Roles and permissions

2008-06-20 Thread John-M Baker
Please respond to users@cxf.apache.org To users@cxf.apache.org cc Subject Re: Roles and permissions On Jun 18, 2008, at 9:38 AM, Sergey Beryozkin wrote: > Hi, > > If so then I'd assuem it's something which needs to be fixed in a > jaxws asm processor, as

Re: Roles and permissions

2008-06-18 Thread Daniel Kulp
On Jun 18, 2008, at 9:38 AM, Sergey Beryozkin wrote: Hi, If so then I'd assuem it's something which needs to be fixed in a jaxws asm processor, as this method Response getApplicationConfiguration(@PathParam("id") String id, @Context SecurityContext sc); is unlikely to be part of what

Re: Roles and permissions

2008-06-18 Thread Sergey Beryozkin
Hi, If so then I'd assuem it's something which needs to be fixed in a jaxws asm processor, as this method Response getApplicationConfiguration(@PathParam("id") String id, @Context SecurityContext sc); is unlikely to be part of whatever interface the JAX-WS endpoint supports ? Dan, what d

Re: Roles and permissions

2008-06-18 Thread John-M Baker
> John Baker > -- > Web SSO > IT Infrastructure > Deutsche Bank London > > URL: http://websso.cto.gt.intranet.db.com > > > > > "Sergey Beryozkin" <[EMAIL PROTECTED]> > 18/06/2008 10:37 > Please respond to > users@cxf.apache.org > &

Re: Roles and permissions

2008-06-18 Thread Sergey Beryozkin
ryozkin" <[EMAIL PROTECTED]> 18/06/2008 10:37 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions I'm sorry, it's a lack of the docs... Please use the SecurityContext from a jaxrs package javax.ws.rs.core Hope it will work Cheers, Sergey

Re: Roles and permissions

2008-06-18 Thread Sergey Beryozkin
xt SecurityContext sc); > > Any other thoughts? > > > John Baker > -- > Web SSO > IT Infrastructure > Deutsche Bank London > > URL: http://websso.cto.gt.intranet.db.com > > > > > "Sergey Beryozkin" <[EMAIL PROTECTED]> > 18/

Re: Roles and permissions

2008-06-18 Thread John-M Baker
p://websso.cto.gt.intranet.db.com "Sergey Beryozkin" <[EMAIL PROTECTED]> 18/06/2008 10:37 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions I'm sorry, it's a lack of the docs... Please use the SecurityContext from a jaxrs package jav

Re: Roles and permissions

2008-06-18 Thread Sergey Beryozkin
I'm sorry, it's a lack of the docs... Please use the SecurityContext from a jaxrs package javax.ws.rs.core Hope it will work Cheers, Sergey - Original Message - From: "John-M Baker" <[EMAIL PROTECTED]> To: Cc: Sent: Wednesday, June 18, 2008 10:13

Re: Roles and permissions

2008-06-18 Thread John-M Baker
o users@cxf.apache.org To cc Subject Re: Roles and permissions Hi John Try @Context SecurityContext sc as a parameter in your method and then sc.isUsertInRole()... The other option is to experiment with Acegi (Spring Security), as far as applying permissions to individual methods -

Re: Roles and permissions

2008-06-18 Thread John-M Baker
"Sergey Beryozkin" <[EMAIL PROTECTED]> 17/06/2008 16:04 Please respond to users@cxf.apache.org To cc Subject Re: Roles and permissions Hi John Try @Context SecurityContext sc as a parameter in your method and then sc.isUsertInRole()... The other option is to exper

Re: Roles and permissions

2008-06-17 Thread Sergey Beryozkin
Hi John Try @Context SecurityContext sc as a parameter in your method and then sc.isUsertInRole()... The other option is to experiment with Acegi (Spring Security), as far as applying permissions to individual methods - I haven't tried myself. I think JAX-RS will support some explicit EE sec

Roles and permissions

2008-06-17 Thread John-M Baker
Hello, Is there any way to use annotations to apply roles to methods in a Webservice or REST call? I'd like to be able to configure an application to let users within one group access a set of methods that another set of users can not access. Is there a way to get the HttpRequest object from