首頁 探索 說明
註冊 登入
github
/
spring-security
镜像来自 https://github.com/spring-projects/spring-security
2
0
複刻 0
檔案 問題管理 0 Wiki
瀏覽代碼

SEC-239: New ACL module.

Ben Alex 19 年之前
父節點
44cae6b2ee
當前提交
3e3db43b37
共有 9 個文件被更改，包括 43 次插入 和 52 次删除
統一視圖 顯示文件統計
  1. 2 2
      samples/contacts-tiger/src/main/webapp/common/WEB-INF/contacts-servlet.xml
  2. 3 14
      samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/adminPermission.jsp
  3. 4 2
      samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/deletePermission.jsp
  4. 1 1
      samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/include.jsp
  5. 6 6
      samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/index.jsp
  6. 16 16
      samples/contacts-tiger/src/main/webapp/filter/accessDenied.jsp
  7. 3 3
      samples/contacts-tiger/src/main/webapp/filter/acegilogin.jsp
  8. 5 5
      samples/contacts-tiger/src/main/webapp/filter/exitUser.jsp
  9. 3 3
      samples/contacts-tiger/src/main/webapp/filter/switchUser.jsp

+ 2 - 2
samples/contacts-tiger/src/main/webapp/common/WEB-INF/contacts-servlet.xml
查看文件 

@@ -29,12 +29,12 @@
 
 
 
     <bean id="adminPermissionController" class="sample.contact.AdminPermissionController">
 
     <bean id="adminPermissionController" class="sample.contact.AdminPermissionController">
 
     	<property name="contactManager"><ref bean="contactManager"/></property>
 
     	<property name="contactManager"><ref bean="contactManager"/></property>
 
-    	<property name="aclManager"><ref bean="aclManager"/></property>
 
+    	<property name="aclService"><ref bean="aclService"/></property>
 
  	</bean>
 
  	</bean>
 
 
 
     <bean id="deletePermissionController" class="sample.contact.DeletePermissionController">
 
     <bean id="deletePermissionController" class="sample.contact.DeletePermissionController">
 
     	<property name="contactManager"><ref bean="contactManager"/></property>
 
     	<property name="contactManager"><ref bean="contactManager"/></property>
 
-    	<property name="aclManager"><ref bean="aclManager"/></property>
 
+    	<property name="aclService"><ref bean="aclService"/></property>
 
  	</bean>
 
  	</bean>
 
 
 
     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
 
     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">

+ 3 - 14
samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/adminPermission.jsp
查看文件 

@@ -1,4 +1,3 @@
 
-<%@ page import="net.sf.acegisecurity.acl.basic.SimpleAclEntry" %>
 
 <%@ include file="/WEB-INF/jsp/include.jsp" %>
 
 <%@ include file="/WEB-INF/jsp/include.jsp" %>
 
 
 
 <html>
 
 <html>
 
@@ -11,27 +10,17 @@
 
 </code>
 
 </code>
 
 <P>
 
 <P>
 
 <table cellpadding=3 border=0>
 
 <table cellpadding=3 border=0>
 
-<c:forEach var="acl" items="${model.acls}">
 
-  <c:if test="${acl.class.name eq 'net.sf.acegisecurity.acl.basic.SimpleAclEntry'}">
 
+<c:forEach var="acl" items="${model.acl.entries}">
 
     <tr>
 
     <tr>
 
       <td>
 
       <td>
 
         <code>
 
         <code>
 
-          <%
 
-            SimpleAclEntry simpleAcl = ((SimpleAclEntry) pageContext.getAttribute("acl"));
 
-            String permissionBlock = simpleAcl.printPermissionsBlock(); 
-          %>
 
-          <%= permissionBlock %>
 
-          [<c:out value="${acl.mask}"/>]
 
-          <c:out value="${acl.recipient}"/>
 
+          <c:out value="${acl}"/>
 
         </code>
 
         </code>
 
       </td>
 
       </td>
 
       <td>
 
       <td>
 
-      <!-- This application doesn't use ACL inheritance, so we can safely use
 
-           the model's contact and know it was directly assigned the ACL -->
 
-        <A HREF="<c:url value="deletePermission.htm"><c:param name="contactId" value="${model.contact.id}"/><c:param name="recipient" value="${acl.recipient}"/></c:url>">Del</A>
 
+      <A HREF="<c:url value="deletePermission.htm"><c:param name="contactId" value="${model.contact.id}"/><c:param name="sid" value="${acl.sid.principal}"/><c:param name="permission" value="${acl.permission.mask}"/></c:url>">Del</A>
 
       </td>
 
       </td>
 
     </tr>
 
     </tr>
 
-  </c:if>
 
 </c:forEach>
 
 </c:forEach>
 
 </table>
 
 </table>
 
 <p><a href="<c:url value="addPermission.htm"><c:param name="contactId" value="${model.contact.id}"/></c:url>">Add Permission</a>   <a href="<c:url value="index.htm"/>">Manage</a>
 
 <p><a href="<c:url value="addPermission.htm"><c:param name="contactId" value="${model.contact.id}"/></c:url>">Add Permission</a>   <a href="<c:url value="index.htm"/>">Manage</a>

+ 4 - 2
samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/deletePermission.jsp
查看文件 

@@ -1,4 +1,3 @@
 
-<%@ page import="net.sf.acegisecurity.acl.basic.SimpleAclEntry" %>
 
 <%@ include file="/WEB-INF/jsp/include.jsp" %>
 
 <%@ include file="/WEB-INF/jsp/include.jsp" %>
 
 
 
 <html>
 
 <html>
 
@@ -11,7 +10,10 @@
 
 </code>
 
 </code>
 
 <P>
 
 <P>
 
 <code>
 
 <code>
 
-<c:out value="${model.recipient}"/>
 
+<c:out value="${model.sid}"/>
 
+</code>
 
+<code>
 
+<c:out value="${model.permission}"/>
 
 </code>
 
 </code>
 
 <p><a href="<c:url value="index.htm"/>">Manage</a>
 
 <p><a href="<c:url value="index.htm"/>">Manage</a>
 
 </body>
 
 </body>

+ 1 - 1
samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/include.jsp
查看文件 

@@ -1,5 +1,5 @@
 
 <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 
 <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 
-<%@ taglib prefix="authz" uri="http://acegisecurity.sf.net/authz" %>
 
+<%@ taglib prefix="authz" uri="http://acegisecurity.org/authz" %>
 
 
 
 <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
 
 <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
 
 <%@ taglib prefix="fmt" uri="http://java.sun.com/jstl/fmt" %>
 
 <%@ taglib prefix="fmt" uri="http://java.sun.com/jstl/fmt" %>

+ 6 - 6
samples/contacts-tiger/src/main/webapp/common/WEB-INF/jsp/index.jsp
查看文件 

@@ -3,7 +3,7 @@
 
 <html>
 
 <html>
 
 <head><title>Your Contacts</title></head>
 
 <head><title>Your Contacts</title></head>
 
 <body>
 
 <body>
 
-<h1><authz:authentication operation="principal"/>'s Contacts</h1>
 
+<h1><authz:authentication operation="username"/>'s Contacts</h1>
 
 <P>
 
 <P>
 
 <table cellpadding=3 border=0>
 
 <table cellpadding=3 border=0>
 
 <tr><td><b>id</b></td><td><b>Name</b></td><td><b>Email</b></td></tr>
 
 <tr><td><b>id</b></td><td><b>Name</b></td><td><b>Email</b></td></tr>
 
@@ -18,15 +18,15 @@
 
   <td>
 
   <td>
 
       <c:out value="${contact.email}"/>
 
       <c:out value="${contact.email}"/>
 
   </td>
 
   </td>
 
-  <authz:acl domainObject="${contact}" hasPermission="16,1">
 
+  <authz:accesscontrollist domainObject="${contact}" hasPermission="8,16">
 
     <td><A HREF="<c:url value="del.htm"><c:param name="contactId" value="${contact.id}"/></c:url>">Del</A></td>
 
     <td><A HREF="<c:url value="del.htm"><c:param name="contactId" value="${contact.id}"/></c:url>">Del</A></td>
 
-  </authz:acl>
 
-  <authz:acl domainObject="${contact}" hasPermission="1">
 
+  </authz:accesscontrollist>
 
+  <authz:accesscontrollist domainObject="${contact}" hasPermission="16">
 
     <td><A HREF="<c:url value="adminPermission.htm"><c:param name="contactId" value="${contact.id}"/></c:url>">Admin Permission</A></td>
 
     <td><A HREF="<c:url value="adminPermission.htm"><c:param name="contactId" value="${contact.id}"/></c:url>">Admin Permission</A></td>
 
-  </authz:acl>
 
+  </authz:accesscontrollist>
 
   </tr>
 
   </tr>
 
 </c:forEach>
 
 </c:forEach>
 
 </table>
 
 </table>
 
-<p><a href="<c:url value="add.htm"/>">Add</a>   <p><a href="<c:url value="../logoff.jsp"/>">Logoff</a> (also clears any remember-me cookie)
 
+<p><a href="<c:url value="add.htm"/>">Add</a>   <p><a href="<c:url value="../j_acegi_logout"/>">Logoff</a> (also clears any remember-me cookie)
 
 </body>
 
 </body>
 
 </html>
 
 </html>

+ 16 - 16
samples/contacts-tiger/src/main/webapp/filter/accessDenied.jsp
查看文件 

@@ -1,16 +1,16 @@
 
-<%@ page import="org.acegisecurity.context.SecurityContextHolder" %>

-<%@ page import="org.acegisecurity.Authentication" %>

-<%@ page import="org.acegisecurity.ui.AccessDeniedHandlerImpl" %>

-

-<h1>Sorry, access is denied</h1>

-

-

-<p>

-<%= request.getAttribute(AccessDeniedHandlerImpl.ACEGI_SECURITY_ACCESS_DENIED_EXCEPTION_KEY)%>

-

-<p>

-

-<%		Authentication auth = SecurityContextHolder.getContext().getAuthentication();

-		if (auth != null) { %>

-			Authentication object as a String: <%= auth.toString() %><BR><BR>

-<%      } %>

+<%@ page import="org.acegisecurity.context.SecurityContextHolder" %>
 
+<%@ page import="org.acegisecurity.Authentication" %>
 
+<%@ page import="org.acegisecurity.ui.AccessDeniedHandlerImpl" %>
 
+
 
+<h1>Sorry, access is denied</h1>
 
+
 
+
 
+<p>
 
+<%= request.getAttribute(AccessDeniedHandlerImpl.ACEGI_SECURITY_ACCESS_DENIED_EXCEPTION_KEY)%>
 
+
 
+<p>
 
+
 
+<%		Authentication auth = SecurityContextHolder.getContext().getAuthentication();
 
+		if (auth != null) { %>
 
+			Authentication object as a String: <%= auth.toString() %><BR><BR>
 
+<%      } %>

+ 3 - 3
samples/contacts-tiger/src/main/webapp/filter/acegilogin.jsp
查看文件 

@@ -1,7 +1,7 @@
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
-<%@ page import="net.sf.acegisecurity.ui.AbstractProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.AuthenticationException" %>
 
+<%@ page import="org.acegisecurity.ui.AbstractProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.AuthenticationException" %>
 
 
 
 <html>
 
 <html>
 
   <head>
 
   <head>

+ 5 - 5
samples/contacts-tiger/src/main/webapp/filter/exitUser.jsp
查看文件 

@@ -1,10 +1,10 @@
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
 
 
-<%@ page import="net.sf.acegisecurity.context.SecurityContextHolder" %>
 
-<%@ page import="net.sf.acegisecurity.Authentication" %>
 
-<%@ page import="net.sf.acegisecurity.ui.AbstractProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.AuthenticationException" %>
 
+<%@ page import="org.acegisecurity.context.SecurityContextHolder" %>
 
+<%@ page import="org.acegisecurity.Authentication" %>
 
+<%@ page import="org.acegisecurity.ui.AbstractProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.AuthenticationException" %>
 
 
 
 <html>
 
 <html>
 
   <head>
 
   <head>

+ 3 - 3
samples/contacts-tiger/src/main/webapp/filter/switchUser.jsp
查看文件 

@@ -1,7 +1,7 @@
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
 <%@ taglib prefix='c' uri='http://java.sun.com/jstl/core' %>
 
-<%@ page import="net.sf.acegisecurity.ui.AbstractProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
-<%@ page import="net.sf.acegisecurity.AuthenticationException" %>
 
+<%@ page import="org.acegisecurity.ui.AbstractProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter" %>
 
+<%@ page import="org.acegisecurity.AuthenticationException" %>
 
 
 
 <html>
 
 <html>
 
   <head>
 
   <head>