I'm using Appfuse 1.9.4 with Struts framework.
I'm trying to use 'methodSecurityInterceptor' to secure access.
I have these constants in Constants.java
Public static final String SPIES_ADMIN = "SpiesAdmin";
Public static final String ADMIN_ROLE = "admin";
Public static final String USER_ROLE = "support";
Public static final String SPIES_USER = "SpiesUser";
I have all these roles in my role table in the database. Now, I want to
grant admin, support access to getInstallations(). So this is what I added
to security.xml
org.appfuse.service.InstallationManager.getInstallations=admin,support to
the methodSecurityInterceptor bean.
If I log in as a user with admin role, I can see all installations.
However, if I log in as a user with support role, I am denied access to
the page.
Can someone please help me.
Thanks in advance
Vanessa Pacheco
Programmer
Bowman Systems L.L.C
318.213.8780x307
======================================
IMPORTANT WARNING: This message is intended for the use of the person or
entity to which it is addressed and may contain information that is
privileged and confidential, the disclosure of which is governed by
applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible to deliver it to the
intended recipient, you are hereby notified that any dissemination,
distribution or copying of this information is strictly prohibited. If you
have received this message in error, please notify the sender immediately
and arrange for the return or destruction of these documents.
