security - Authentication and Authorization Framework for Java Web-Application -

-

I am programming a web application with JavaE, JSF and Hibernate. I do not use Spring or EJB! Now I am at that point where certification and authorization have to be implemented. I need access to an Active Directory or LDAP and I want to implement my own roles, which can not be obtained with AD / LDAP.

My question is, what is the easiest way to implement it? Should I use the frame like the JAAS / Apache head? And which is the best for my intentions?

About the concept of small roles: I had planned to set up a property file, where I can configure roles.

Apache head is more useful than spring security, if only because SS Enterprise does not support session management or simplifies cryptography outside the box (does it) Supports even better micro-security models (such as the wildcardpromination of the head) She also does LDAP and Active Directory. Also keep in mind that Shiro was built with architectural foundation from day one, so that no application should work in the environment, not only the spring application (but it is better in the spring app to make sure). The same can not be said about spring safety (it was actually just started for spring applications.)

As far as the small number of users and / or roles are, you can easily Can do in For example: [main] ... [users] jsmith = password, role 1 ajones = other password, role 1, role 2 [roles] role1 = perm1, perm2, ..., permn role 2 = perma, PermB, ..., permz

At the end of the day, both Apache Shiro and Spring Protection are great frameworks - both are standing well on their properties

Cheers ,

Cheers,

should be the basis of your choice, which should fit your mental model better (which means the name of interface and class more Understandable?)

les


Comments

Post a Comment

Popular posts from this blog

c# - sqlDecimal to decimal clr stored procedure Unable to cast object of type 'System.Data.SqlTypes.SqlDecimal' to type 'System.IConvertible' -

-
I'm new to this I'm writing a clr. stored procedure that can be used to get values ​​used in a calculation Call for another stored procedure for Gives an archived methodology int (I think SqlInt32? Value of the table's value is int) which is then necessary to convert to decimal. Here I have the code: Public static integral mood (SQL MDMMYLUE, escalistering AMY type, out of SQLDCM Result) {aResult = 0; Try {SqlConnection conn = New SqlConnection ("Reference Connection = True"); SqlCommand cmd = New SqlCommand ("sp_GetType", conn); Cmd.Parameters.AddWithValue ("@ myValueType", aMyValueType); Cmd.CommandType = CommandType.StoredProcedure; Conn.Open (); Object type = CMD. Exclamation Asser (); Conn.Close (); Decimal type FORCalculation = Convert. ToDecimal (type); Decimal value = convert toDecimal (aMyValue); // ** calculation calc = new calculation (); Decimal result = calorie.docalulation (typefarculation, value); I get an exception...
Read more

Calling GetGUIThreadInfo from Outlook VBA -

-
I need to find the active window'm writing a VBA macro in MS Outlook, which is a specific process. The goal of this is to get the active window / document name even if its original application has more than one document interface. User processor with GetCurrentThreadId is active, I am using GetGUIThreadInfo to get .dll. Here is the correct code: private type RECT as as Left LongPtr top LongPtr right LongPtr down LongPtr termination of private type GUITHREADINFO cbSize as LongPtr flags LongPtr hwndActive LongPtr hwndFocus LongPtr hwndCapture LongPtr as as as as as reset as LongPtr rcCaret as LongPtr hwndCreate as LongPtr hwndMoveSize as HwndMenuOwner end of Private Equity PtrSafe function GetWindowThreadProcessId Lib "user32" (_BVV hnw LongPtr as LongPtr Nig Mr. announced as PtrSafe function GetGUIThreadInfo Lib "user32" _ (ByVal dwthreadid as LongPtr, _ lpguithreadinfo as GUITHREADINFO) LongPtr Sub MyFunction () as dim strWindowTitle string = space as s...
Read more

Obfuscating Python code? -

-
I'm looking for a way to hide my Python source code. print "Hello World!" How can I encode this example so that it is not human-readable? I have been asked to use Base 64 but I'm not sure how. itemprop = "text"> It is limited only, first level ambiguous resolution, but has built-in: byte-code in Python Is a compiler for: dragon-o-m py_compile & lt; Your program.py & gt; creates a .pyo file with a byte-code, and where the docstrings are removed, etc. You can rename .pyo with the .py extension, and python & lt; Your program.py & gt; runs as your program, but it does not have your source code. PS : If your program blur modules like this, you need to rename them with the .pyc suffix (I Not sure it will not break a day), or you can work with .pyo and run them with python -o ... .pyo ( Import should work). This will allow dragon to search your modules (otherwise, Python looks for the .py module).
Read more