Hi James,
What you need to do for this requirement is to configure Shiro to use
database tables, using its JdbcRealm or similar [1], [2], [3]

Then, model these concepts as entities within Isis, such that (when using
our JDO objectstore) that they map onto these tables.

You'll then be able to configure access to your regular entities (ToDoItem
or whatever) through Isis itself.

I can see this being a useful "off-the-shelf" component that others might
want to use, so you might want to do this as a little independent project
in github or similar.  (Getting ahead of myself... some day it might also
be good to incorporate within Isis itself)

HTH
Dan

[1]
http://shiro.apache.org/static/1.2.1/apidocs/org/apache/shiro/realm/jdbc/JdbcRealm.html
[2] http://blog.pinateknoloji.com/shiro-jdbc-realm
[3] http://java.dzone.com/articles/java-web-application-security-1


On 23 June 2013 08:36, james agada <[email protected]> wrote:

> No I am not building an Identity management system. I will take your advice
> though. I will use pwm to manage users but then how will I be able to use
> that in the domain model? When a user logs in, I want him to have access to
> some data only. In the ToDo application this is achieved with the ownedby
> property but I want to go beyond that and have the owned by to be an entity
> to which I can assign users. I can model the entity but I cannot get list
> of users from Isis.
>
> Sent from my iPhone
>
> On Jun 22, 2013, at 10:23 PM, David Tildesley <[email protected]> wrote:
>
> Sent from Yahoo! Mail on Android
>
> Are you building an Identity Management system? If not then obviously the
> first requirement is normally orthogonal to the business domain and is left
> to whatever manages users in an LDAP directory including group membership.
> The second requirement could be modeled as part of the business domain.
>
> David.
>
>  ------------------------------
> * From: * Okwui <[email protected]>;
> * To: * [email protected] <[email protected]>;
> * Cc: * [email protected] <[email protected]>;
> * Subject: * Re: user management in isis
> * Sent: * Sat, Jun 22, 2013 6:54:14 PM
>
>   I have read those. What I want to do is provide a UI to create users and
> assign roles. I also want to associate users with objects for instance I
> want to have a department object that refers to a user object as the
> manager of the department.
>
> Sent from my iPad
>
> On Jun 22, 2013, at 2:09 PM, Jeroen van der Wal
> <[email protected]<javascript:return>>
> wrote:
>
> > Isis uses Apache Shiro for authentication and authorization  You can
> > find further details in the documentation [1]
> >
> > [1] http://isis.apache.org/components/security/shiro/about.html
> >
> > On Fri, Jun 21, 2013 at 11:54 PM, Okwui <[email protected]
> <javascript:return>>
> wrote:
> >> How do I implement a user management system?
>

Reply via email to