permission | ACL |
With this attribute, access to the element can be restricted.
Authorizations are checked using the com.cc.framework.security.Principal
object in the user session. The principal object is registered in the session
with the method com.cc.framework.security.SecurityUtil#registerPrincipal(HttpSession, Principal).
It is made available by the application developer by implementing the principal
interface. In this manner, any authorization system can be very easily connected
within the framework.
Authorizations are always specified in the form of an Access Control List (ACL).
What is involved here is a semicolon-delimited list with individual authorizations.
The framweork supports the following authorization types, which, however, can be
expanded at will by the application developer:
- Literal
- true|false -> com.cc.framework.security.StaticPermission
- Role
- #rolename -> com.cc.framework.security.RoleBasedPermission
- Function
- $functionname -> com.cc.framework.security.FunctionBasedPermission
| |
|