在easyjweb应用中关于acegi安全配置的增强

原创于 2008-06-08 10:41:00 发布 · 367 阅读

CC 4.0 BY-SA版权

文章标签：

　　在easyjweb的应用程序中，我们习惯通过easyJWebCommand这一参数来指定服务器端控制器的执行命令。比如newsDocManage.ejf?easyJWebCommand=edit&id=1，将执行NewsDocManageAction中的doEdit方法。

　　在acegi中，最简单也是最常用的权限控制是基于url拦截的权限控制。比如，为了对添加文章进行权限控制，我们需要添加一个类似如下URL资源：/newsDocManage.ejf/?easyJWebCommand=add.*。这样当用户点击这一连接的时候，将会进一步检查用户对该URL的访问权限，从而达到保护。

　　在EasyJWeb的快速应用开发构架中，easyJWebCommand这一个命令参数都是以隐藏表示元素的形式存在的，比如，在表单中一般会包含下面的元素：。而大我数表单都是以post方式提交的。此时就无法使用基于URL拦截的方式对doEdit方法进行资源描述及权限控制，而只能使用基于方法调用的资源来描述。但acegi的方法调用需要使用AOP，特别是代理Bean的配置也比较麻烦，而且实现应用中是不会直接像acegi的示例那样直接修改配置文件的，而且这是MVC一级的东西，我们不宜使用AOP,（当然，直接通过AOP配置业务逻辑层组件的除外）。

　　在今天更新的acegi集成的开发框架版本中，增加对NewsDocManageAction的doEdit方法进行描述及权限控制的支持。也就是说，不管使用get或者是post。在基于easyjweb的应用中，都可以直接使用get的方式来进行权限描述。比如上面的doEdit方法，可以直接使用下面的资源描述：/newsDocManage.ejf/?easyJWebCommand=edit.*
　
　　这样，不管是post提交还是get提交，都可以使用一致的方式的对控制器中的方法进行权限设置了。

　　注意要使用这个功能，需要调整一下web.xml的配置，特别是filter的配置。修改的事项：
　　1、CharsetFilter需要放在Acegi Filter Chain Proxy的前面
　　2、两个filter者url-pattern最好保持一致，否则就会在有的地方出现乱码。
　　修改后的web.xml文件如下：

xml version="1.0" encoding="UTF-8"?>

<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee

http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

<context-param>

<param-name>easyjwebConfigLocation</param-name>

<param-value>/WEB-INF/mvc.xml,/WEB-INF/mvc-tms.xml</param-value>

</context-param>

<servlet-name>easyjf</servlet-name>

<servlet-class>com.easyjf.web.ActionServlet</servlet-class>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>*.ejf</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>/ejf/*</url-pattern>

</servlet-mapping>

<filter-name>CharsetFilter</filter-name>

<filter-class>com.easyjf.web.CharsetFilter</filter-class>

<init-param>

<param-name>encoding</param-name>

<param-value>UTF-8</param-value>

</init-param>

<init-param>

<param-name>ignore</param-name>

<param-value>true</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>CharsetFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>

<init-param>

<param-name>targetClass</param-name>

<param-value>org.acegisecurity.util.FilterChainProxy</param-value>

</init-param>

<init-param>

<param-name>init</param-name>

<param-value>lazy</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

</web-app>

xml version="1.0" encoding="UTF-8"?>

<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee

http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

<context-param>

<param-name>easyjwebConfigLocation</param-name>

<param-value>/WEB-INF/mvc.xml,/WEB-INF/mvc-tms.xml</param-value>

</context-param>

<servlet-name>easyjf</servlet-name>

<servlet-class>com.easyjf.web.ActionServlet</servlet-class>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>*.ejf</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>/ejf/*</url-pattern>

</servlet-mapping>

<filter-name>CharsetFilter</filter-name>

<filter-class>com.easyjf.web.CharsetFilter</filter-class>

<init-param>

<param-name>encoding</param-name>

<param-value>UTF-8</param-value>

</init-param>

<init-param>

<param-name>ignore</param-name>

<param-value>true</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>CharsetFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>

<init-param>

<param-name>targetClass</param-name>

<param-value>org.acegisecurity.util.FilterChainProxy</param-value>

</init-param>

<init-param>

<param-name>init</param-name>

<param-value>lazy</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

</web-app>

xml version="1.0" encoding="UTF-8"?>

<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee

http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

<context-param>

<param-name>easyjwebConfigLocation</param-name>

<param-value>/WEB-INF/mvc.xml,/WEB-INF/mvc-tms.xml</param-value>

</context-param>

<servlet-name>easyjf</servlet-name>

<servlet-class>com.easyjf.web.ActionServlet</servlet-class>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>*.ejf</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>/ejf/*</url-pattern>

</servlet-mapping>

<filter-name>CharsetFilter</filter-name>

<filter-class>com.easyjf.web.CharsetFilter</filter-class>

<init-param>

<param-name>encoding</param-name>

<param-value>UTF-8</param-value>

</init-param>

<init-param>

<param-name>ignore</param-name>

<param-value>true</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>CharsetFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>

<init-param>

<param-name>targetClass</param-name>

<param-value>org.acegisecurity.util.FilterChainProxy</param-value>

</init-param>

<init-param>

<param-name>init</param-name>

<param-value>lazy</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

</web-app>

xml version="1.0" encoding="UTF-8"?>

<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee

http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

<context-param>

<param-name>easyjwebConfigLocation</param-name>

<param-value>/WEB-INF/mvc.xml,/WEB-INF/mvc-tms.xml</param-value>

</context-param>

<servlet-name>easyjf</servlet-name>

<servlet-class>com.easyjf.web.ActionServlet</servlet-class>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>*.ejf</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>easyjf</servlet-name>

<url-pattern>/ejf/*</url-pattern>

</servlet-mapping>

<filter-name>CharsetFilter</filter-name>

<filter-class>com.easyjf.web.CharsetFilter</filter-class>

<init-param>

<param-name>encoding</param-name>

<param-value>UTF-8</param-value>

</init-param>

<init-param>

<param-name>ignore</param-name>

<param-value>true</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>CharsetFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>

<init-param>

<param-name>targetClass</param-name>

<param-value>org.acegisecurity.util.FilterChainProxy</param-value>

</init-param>

<init-param>

<param-name>init</param-name>

<param-value>lazy</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>Acegi Filter Chain Proxy</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

</web-app>