Hi Alex - Quick background, I added a custom realm that performs AuthC and AuthZ against Active Directory credentials and "memberOf" groups respectively to the Apache Click "Getting Started" example app created by Freddy Daoud (http://www.fdaoud.com/clickbook/)
Logging in my EnterpriseRealm shows a critical need for cache of the authorization info since even a vanilla login hits queryForAuthorizationInfo() four times. I've searched the net, but the one interesting piece of the AuthZ Guide is the "Cache" part that is TBD. Doh! :-) I've seen Les mention it's easy enough, and I have a few bits of config code for setting up Ehcache in the Spring settings. Seems like having an example config for that would be helpful (to me at least!). Cheers -Tim -- View this message in context: http://shiro-user.582556.n2.nabble.com/Shiro-Authorization-Guide-tp6065264p6163278.html Sent from the Shiro User mailing list archive at Nabble.com.
