Hi,

I'm using XDoclet CVS (08/08/02) but with the bog-standard Data Objects and
I'm puzzling over column level security and wondering if XDoclet can already
help me here.

I have an entity called Staff which has many fields...for example:
 * surname
 * firstname
 * telephone_number
When I return the data to the persistence layer (and ultimately to the front
end) I have different security roles, and each role can see a different set
of data.....I want to restrict the data as close to the source as possible
(though not in the database itself).

E.g
  admin-role --> can see *
  normal-role --> can only see surname and firstname (and telephone_no is
blocked).

AFAIK, EJB-QL understands the concept of objects rather than attributes so I
can only do row level security using EJB-QL (correct?)
But I want to do column level security.

Is this something that XDoclet (and Value Objects?) can help me with? Is
anyone else doing this successfully already? (or is there an alternative and
better approach?).

Thanks (in advance)

Chris
-=-=-=

Any e-mail message from the European Central Bank (ECB) is sent in good faith but 
shall neither be binding nor construed as constituting a commitment by the ECB except 
where provided for in a written agreement.
This e-mail is intended only for the use of the recipient(s) named above. Any 
unauthorised disclosure, use or dissemination, either in whole or in part, is 
prohibited.
If you have received this e-mail in error, please notify the sender immediately via 
e-mail and delete this e-mail from your system.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Xdoclet-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/xdoclet-user

Reply via email to