RE: object based security (owner)

2014-03-18 Thread Ken in Nashua
Thanks Kalle, thats the answer I was seeking. Which persistence Service wold in order to ORM o MySQL ? Does that JPA construct do it itself somehow like javabeans or can I use the existing hibernate persistence service that comes with your suite ? Thanks for the solution, appreciate that. Ken

Re: object based security (owner)

2014-03-18 Thread Dmitriy Vsekhvalnov
is tapestry-security-jpa provides filtering data support? E.g. when i execute .list() operation with query can it apply filter based on owner or other rule? like Hibernate filters? On Tue, Mar 18, 2014 at 5:08 PM, Ken in Nashua kcola...@live.com wrote: Thanks Kalle, thats the answer I was

Re: object based security (owner)

2014-03-18 Thread Kalle Korhonen
On Tue, Mar 18, 2014 at 6:08 AM, Ken in Nashua kcola...@live.com wrote: Thanks Kalle, thats the answer I was seeking. Which persistence Service wold in order to ORM o MySQL ? Does that JPA construct do it itself somehow like javabeans or can I use the existing hibernate persistence service

Re: object based security (owner)

2014-03-18 Thread Kalle Korhonen
On Tue, Mar 18, 2014 at 7:43 AM, Dmitriy Vsekhvalnov dvsekhval...@gmail.com wrote: is tapestry-security-jpa provides filtering data support? E.g. when i execute .list() operation with query can it apply filter based on owner or other rule? like Hibernate filters? No, this is meant strictly

Re: object based security (owner)

2014-03-18 Thread Dmitriy Vsekhvalnov
Kalle, do you mean it works only for traversing object graph? (sorry i probably have to check myself before asking stupid questions). On Tue, Mar 18, 2014 at 8:31 PM, Kalle Korhonen kalle.o.korho...@gmail.comwrote: On Tue, Mar 18, 2014 at 7:43 AM, Dmitriy Vsekhvalnov dvsekhval...@gmail.com

Re: object based security (owner)

2014-03-18 Thread Kalle Korhonen
On Tue, Mar 18, 2014 at 10:02 AM, Dmitriy Vsekhvalnov dvsekhval...@gmail.com wrote: Kalle, do you mean it works only for traversing object graph? (sorry i probably have to check myself before asking stupid questions). Yes. It checks that a security principal of the currently executing

Re: object based security (owner)

2014-03-15 Thread Jens Breitenstein
Hi Ken! this sounds more like a persistence question, to be honest. How do you store / persist the user data? Jens Am 15.03.14 06:44, schrieb Ken in Nashua: Hi Folks, I want to create a web site data model whereby... whatever a user creates... they own. And when they come back to the

Re: object based security (owner)

2014-03-15 Thread Boris Horvat
I could be missing something, but isn't this a database question? how to model your tables and relationships between them? I dont see this as being tapestry related question to be honest On Sat, Mar 15, 2014 at 10:41 AM, Jens Breitenstein mailingl...@j-b-s.dewrote: Hi Ken! this sounds more

Re: object based security (owner)

2014-03-15 Thread Lance Java
Boris, you're not missing anything. 10% of what Ken posts to the tapestry mailing list is related to tapestry... The other 90% is off topic :)

Re: object based security (owner)

2014-03-15 Thread Geoff Callender
In my world this distinction is often referred to as data rights vs. function rights. Function rights can indeed be handled by restricting access to pages and components with annotations and sometimes a bit of conditional logic in the template. It's up to you whether you check function rights in

Re: object based security (owner)

2014-03-15 Thread Kalle Korhonen
There's also http://tynamo.org/tapestry-security-jpa+guide that has annotations and works at the entity level - it's JPA only at the moment. Kalle On Sat, Mar 15, 2014 at 5:22 AM, Geoff Callender geoff.callender.jumpst...@gmail.com wrote: In my world this distinction is often referred to as

Re: object based security (owner)

2014-03-15 Thread Geoff Callender
Oops, I said The service can return a really nasty error if it fails - there's no need to be nice because the user should not be in that situation unless they've hacked the URL. What I should have said is that if the user does not even have read rights to the requested item then the service can

Re: object based security (owner)

2014-03-15 Thread Geoff Callender
Very nice. On 16/03/2014, at 3:00 AM, Kalle Korhonen wrote: There's also http://tynamo.org/tapestry-security-jpa+guide that has annotations and works at the entity level - it's JPA only at the moment. Kalle - To