[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Regarding JEE security with fortress



Hi,

Resending.

Regards,
Ramandeep

On Nov 29, 2013 3:10 PM, "raman nanda" <ramannanda9@gmail.com> wrote:
Hi,

I have been browsing the example of security posted on iamfortress. I have a query, I would be glad if anyone can answer it.

Fortress security requires that the roles be defined in the deployment descriptor i.e web.xml . Now as we have to define the roles in the deployment descriptor ; So even though we can create new roles using the SDK, we would have to redeploy the application with new deployment descriptor every time a new role is added. Apache Shiro on other hand uses a filter and all you need to specify is where to find the roles and permissions. You do not have to declare them in the deployment descriptor. Is there something of this sort available with fortress ?

Any thoughts on how to overcome this limitation ?

Regards,
--
Ramandeep Singh
http://ramannanda.blogspot.com
ramannanda9@gmail.com