User 1 « Security « Spring Q&A





1. How to immediately enable the authority after update user authority in spring security?    stackoverflow.com

I'm using spring-security framework.When I update the permissions,It does not take effect immediately.I have to quit the current user(means logout), and then re-visit(means login) will be to update the user's permission. Is ...

2. Adding new users in Spring Security    stackoverflow.com

I have basic spring security set up in my Spring / Java EE web app. I can restrict access to certain pages and force login (with roles etc.). There ...

3. How to set custom attributes to user details object in spring security 3.0    stackoverflow.com

The question says it all. In spring security 2.x we can set the custom values to the user in the userattributes. Is there a similar/alternate way of doing the same in ...

4. Accessing Spring Security User Details from within Mule Services    stackoverflow.com

We're securing Mule services using the Spring Security Framework, and some of the services need to access some information in the UserDetails object. Is there a way to access this ...

5. Spring Security User    stackoverflow.com

What is best practise in Spring when creating a new user with custom attributes...to extend org.springframework.security.core.userdetails.User or to create the User in the UserDetailsService (this is the approach taken in the ...

6. count active users    stackoverflow.com

I'm using spring security 2. 1.may i know how to use securitycontextholder to get total number of active users?
2. can retrieve sessionregistry from securitycontextholder?

7. How can I implement a switch user function in Seam?    stackoverflow.com

Spring security provides this switch user feature which I used in previous projects. I checked the document of Seam 2.2.0.GA and found a RunAsOperation class for this purpose, but how can ...

8. How to change user authorities programmatically?    stackoverflow.com

Greetings all i am using spring security 3.0.2 and i want after login to get user authorities and add another role to him so he can access some page that requires the new role how ...

9. UI widget development framework    stackoverflow.com

I am going to redesign a website which is built using spring web MVC and javascript. Its a very simple website with limited features. But, I see that in near future, ...





10. Spring Security: Find Groups A User Belongs To?    stackoverflow.com

How do I find groups a user belongs to? I can use GroupManager.findAllGroups() then loop the group with GroupManager.findUsersInGroup(java.lang.String groupName). However, this is expensive. Do we have any straight forward method? Thanks. ...

11. Using Spring IOC when gradual or iterative user input is required?    stackoverflow.com

I have a desktop application I wish to migrate to Spring (3.0.5) which involves "steps" where user decisions are needed before certain objects (or beans) can be instantiated. Hypothetical example: Suppose the ...

12. spring security (3.0.x) and user impersonation    stackoverflow.com

In my web application, there are times when an authenticated admin might want to impersonate another valid user of a system without having to know that user's password. How can I use ...

13. Generate a code from user e-mail to generate a link and then send    stackoverflow.com

I am developing an app that enables existing users to invite their friends via e-mail. During the invitation process I generate a code to use in a link that the ...

14. Anonymous user count using Spring Security    stackoverflow.com

I have managed to accomplish a couple features using Spring Security 3.0.5. The first is that I want a count and list of users that have a specific role. ...

15. How to check if user has right in spring security?    stackoverflow.com

I checked this question, and I know how to get and check user role in java. But, what I want is, when user clicks some links in page, if user has ...

16. Do I strictly need authorities for user-service in Spring?    stackoverflow.com

If I remove

<authorities-by-username-query="myquery"> 
in my jdbc-user-service then my form always gives me 'bad credentials'. I've checked it triple times , I cannot authorize person without giving him at least one ...





17. User Downloads In Java Spring    stackoverflow.com

I need to make a link in my Java Spring application that will allow the user to download a CSV file . I have the CSV file in my project's root ...

18. issue for tracking online active users    forum.springsource.org

issue for tracking online active users Based on the introduciton from book of "Spring Security 3", we can use SessionRegistry to retrieve all the active online users by this simple line: ...

19. How to detect a user to find out whether it's online or not?    forum.springsource.org

How to detect a user to find out whether it's online or not? In my application,there's a module need to show user online status.So I add a boolean type field in ...

20. Looking for Online Users (Friends)    forum.springsource.org

Looking for Online Users (Friends) Hello! Im working on a small webapplication with Spring and Spring Security and I want to realize something, but Im not sure how to do it. ...

21. Spring security User class constructor    forum.springsource.org

Spring security User class constructor hi guys In spring security 2.0.3 i could do public class UserInformation extends User { public String accountId = null; public String email = null; public ...

22. Create new NETWORK users using BATCH FILE in XP.?    forum.springsource.org

i know that you can create new users in command prompt by typing: net user USERNAME PASSWORD /add and change their user group with the command net localgroup USERGROUP /add USERNAME ...

23. User groups    forum.springsource.org

Does Acegi support the concept of user groups? For example, a bank application that defined a user group called tellers. Permissions would be associated with the group and anyone belonging to ...

24. Dynamic View based on format requested by user    forum.springsource.org

How do I select views based on format requested by user. User can pass the format as query string / parameter to the controller. like - myController.action?format=JSON or myController.action?format=XML or myController.action?format=jsp ...

25. How to serve custom themes based on user's choice ?    forum.springsource.org

How to serve custom themes based on user's choice ? Hi guys. I intend to serve custom themes to users of my application. There will be a default theme but the ...

26. Handling concurrent users    forum.springsource.org

Handling concurrent users We are developing a new application and have the following issue: If 2 browsers are up, the form that had the last activity is the one that gets ...

27. a few minor typos in the User Guide    forum.springsource.org

Something trivial like this doesn't really matter where you report it, but JIRA is best because it will never be forgotten or overlooked there. Patches in github also always welcome. Don't ...

28. 2.6.0Release installer won't install as non-admin user in OS X    forum.springsource.org

2.6.0Release installer won't install as non-admin user in OS X Normally non-admin users on OS X can install if they provide an admin name and password, but with the 2.6.0 Release ...

29. Remove leading and trailing spaces in user input    forum.springsource.org

I am using Spring MVC for a few forms. Users are not alloed to enter blanks for text fields. I remember I saw somewhere about configuring Spring MVC in a web ...

30. User Documentation    forum.springsource.org

31. Data Source with that caches connections for named users?    forum.springsource.org

Data Source with that caches connections for named users? Hi Everyone, I am looking for a connection pool that can work like this (which may be a lot to ask). - ...

32. Dynamic and Static users?    forum.springsource.org

Dynamic and Static users? From my understanding, there are two ways of having users that can be authenticated. One is from "jdbc-user-service" (dynamic database driven). The other is "user-service" (statically defined ...

33. Design question - Spring service with different user groups    forum.springsource.org

Design question - Spring service with different user groups Hi, I have a design question about my webapp. There are different user groups (admin, user, guest). Now I want to separate ...

34. Spring 3 user admin system??    forum.springsource.org

35. Group policies and user specific policies    forum.springsource.org

Group policies and user specific policies Dear All, I am a beginner in spring security, which is not so difficult to learn and use, and my question is : During a ...

36. [newbie] single user authorities?    forum.springsource.org

[newbie] single user authorities? Hello I'm a newbie of Acegi for Spring and a I've got a little experience with Spring. Until now I've used the schema of JpetStore example (SimpleUrlHandlerMapping ...

37. "Server does not support RECENT or USER flags", clarification needed    forum.springsource.org

"Server does not support RECENT or USER flags", clarification needed Hi Mark and Oleg, I'm using MS Exchange sever. After upgrading to 2.0.4 I've observed that some messages are not fetched ...

38. How to select reader, writer based upon user input.    forum.springsource.org

39. New User vs Spring User    forum.springsource.org

Usually this is a labelling according to the number of your submitted postings (unless you have a special role like administrator). I guess if you made enough postings you will be ...

40. InvalidDataAccessApiUsageException querying for a matching User    forum.springsource.org

InvalidDataAccessApiUsageException querying for a matching User I have defined an interface for the User entity called UserRepository and it has defined one method that should allow it to find the matching ...

41. RememberMeAuthenticationProvider does not check for locked (or disabled) user    forum.springsource.org

I have noticed that RememberMeAuthenticationProvider does not AbstractUserDetailsAuthenticationProvider while DaoAuthenticationProvider does. Since the functionality of UserDetailsChecker (pre and post) is available only in AbstractUserDetailsAuthenticationProvider so this results into not checking user's ...

42. could spring security let user custom authority?    forum.springsource.org

Hi, i'm developing applications that allow user(such as admin of customers' company) adds roles, departments and/or groups as their corporation need. And, authorities can be custom such as who can see ...

43. How to create new user using Spring security    forum.springsource.org

Hi All, I want to develop a create new user page where the user has to enter his password and that will be encoded and stored into the database. Can anybody ...

44. Preauthenticate with specified user    forum.springsource.org

Preauthenticate with specified user Yes I would actually like to specify, hard-code, the user to be 'authenticated'. This is to accomplish both to #1 have a security layer and #2 not ...

45. can we user subfolder as part of handle name?    forum.springsource.org

can we use something like: /ge/my_page1.htm with the following Controller code? @Controller public class Xyz extends ActBase { @RequestMapping(value = "/ge/my_page1.htm") protected ModelAndView do_index(ModelAndView mv, HttpServletRequest request) throws Exception { ... ...

46. Link to STS User Manual    forum.springsource.org

Is there a user guide for STS? I have googled for one, but have not found anything helpful yet. Does anyone have any good links for using STS and the VM ...

47. Kicking users off when privileges change    forum.springsource.org

Kicking users off when privileges change Hi all, First off I love Spring now I've got my head round a lot of it Unfortunately though I've run into a little problem ...

48. Setting up security is easy, maintaining users isn't...    forum.springsource.org

Setting up security is easy, maintaining users isn't... All the demo's and examples I've seen for setting up Spring Security are great. How to protect your url's and methods, and even ...

49. List all authenticated users?    forum.springsource.org

Is there a way to obtain a complete list of all authenticated users with an active session? I'm building an admin dashboard for my app and would like to give ROLE_ADMIN ...

50. Why does user define macros not work on UNIX but on Windows    forum.springsource.org

Why does user define macros not work on UNIX but on Windows I have user defined marcos defined in vm_global_librry.vm. Everything works ok in a local development environment and a windows ...

51. How can I allow a user override with Spring Security?    forum.springsource.org

How can I allow a user override with Spring Security? In my Spring MVC web application, there are certain areas accessible only to users with sufficient privileges. Rather than just have ...

52. users ad primary group not used in spring?    forum.springsource.org

I have setup my app to search for groups the user is associated with. However it seems as though the primary group does not show up. Is their any way to ...

53. Hello-world applet crashes for a basic-authenticated user    forum.springsource.org

Nov 20th, 2011, 08:47 PM #1 maine View Profile View Forum Posts Private Message Junior Member Join Date Nov 2011 Posts 1 Hello-world applet crashes for a basic-authenticated user Hi everybody, ...

54. Getting fullname from from custom user details    forum.springsource.org

Getting fullname from from custom user details Hi I am trying to get the full name of the user as below, but it returns null always - public UserDetails mapUserFromContext(DirContextOperations context, ...

55. Sending a user defined object with JAXRPC??    forum.springsource.org

Sending a user defined object with JAXRPC?? Hi I am trying to invoke a JAXRPC service which accepts a User Defined Object using the Spring JAXRPC client. It works great for ...

56. Counting number of users online?    forum.springsource.org

Counting number of users online? Hey there, Was just brainstorming how to track the number of online users with acegi? Any ideas? My first instinct was to make an imp-lementation of ...

57. 10K concurrent users in Spring?    forum.springsource.org

10K concurrent users in Spring? All, I came across an email in which Rod Johnson said that there is a Spring application that will handle 10K potentially concurrent users. See this ...

58. User information in the service layer    forum.springsource.org

User information in the service layer Hi all, I'm wondering if anyone has any ideas as to how one might go about propogating user information from the web layer down to ...

59. Redeploy problem with User Cache    forum.springsource.org

Redeploy problem with User Cache I am not sure if I should post this to this forum, but it seems reasonable to post it here. I implemented EhSecurityCache and NullSecurityCache (which ...

60. How to pass User from thread to thread    forum.springsource.org

How to pass User from thread to thread Hi all ! I think I need a RUN_AS configuration, but I'm not too sure about it... Let me explain. One of my ...

61. default constructor in User and GrantedAuthorityImpl    forum.springsource.org

Hi, I would like to know why the default constructors in User and GrantedAuthorityImpl throw IllegalArgumentException. This makes their use as base classes for my hibernatre persisted classes difficult.

62. BeJUG Rich User Interfaces in Java    forum.springsource.org

BeJUG Rich User Interfaces in Java Phew, I did it, I gave my first presentation ever. (And it was about Spring-Rich!!!) 8) There were a lot of people (150+). First I ...

63. Multiple windows with one user    forum.springsource.org

Now I now how to avoid the situation if a user wants to perform a second login. I would use ConcurrentSessionController. But does anyone know how to solve situation when user ...

64. Dedicated connection pool per user    forum.springsource.org

Dedicated connection pool per user Hi, I'm currently using Spring 1.1.5, Struts 1.2 and Hibernate 2.1 in a webapp and everything is up and running pretty well so far, thanks to ...

65. Implemenenting 'Per user UI persistence layer'    forum.springsource.org

Implemenenting 'Per user UI persistence layer' Hi, I previously worked on JBOSS application we did not use any frameworks except for the com.primix.servlet package which created a session object for every ...

66. In MultipartResolver, different maxUploadSize per user    forum.springsource.org

In MultipartResolver, different maxUploadSize per user Hi, I am building a site that handles file documents that can be uploaded by users. The site has upload quota per user, so my ...

67. Preserving user input through missing setRequiredFields    forum.springsource.org

When I have some setRequiredFields in my form, how do I make sure that not all input is gone after a user submits something that is not accepted because of a ...

68. Converting user input to an integer    forum.springsource.org

Hi there My users are getting a NumberFormatException when entering numbers separated with commas, eg. '12,000'. I'd like my webapp to be intelligent enough to convert this to an integer without ...

69. User quota.    forum.springsource.org

70. Forcing authenticated user to perform task before proceeding    forum.springsource.org

Forcing authenticated user to perform task before proceeding Hi: I've been trying to figure out how to do something using Acegi (0.8.2) and still it escapes me. The simplest case is ...

71. Disallow the user to type letters in numeric JTextFields    forum.springsource.org

Hi, I've bound a JTextField in my form to an Integer property in my Entity. It works fine but I would like to disallow the user to type chars other than ...

72. User Management    forum.springsource.org

how can i add, update and delete users? are these processes a part of spring or agile? i am using mysql for both authentication and authorization.

73. Enterprise users of Spring    forum.springsource.org

Hi, Is it possible to share some examples of high volume, low latency applications that currently use Spring in production? My team is considering how Spring could fit with real time ...

74. Null User Principle    forum.springsource.org

Null User Principle Hi, I am able to redirect to my page after successfully logging in. However, I am getting null when I do a request.getUserPrinciple(). Does anyone knwo what could ...

75. Implement an own user and a jdbcDaoImpl    forum.springsource.org

Hi all. I want to make a mysql database where persist the users information (username, password, and a lot), so i have to take the authentication stuff from this database. Until ...

76. User Object typical approach    forum.springsource.org

Hello there I'm trying to get acegi to work here (hum, now I believe it takes 2 days to get it working :twisted: ) One thing is the users table, how ...

77. User-agent based view resolver    forum.springsource.org

I want to be able to have two different versions of the same JSP page: one for tailored for a PDA and one for a standard web browser, depending on how ...

78. custom User    forum.springsource.org

I have extended the User class which implements UserDetails. It has a bunch of custom fields. How do I access my custom User class out of the session?

79. Can I user HibernateTemplate with lazy-loading?    forum.springsource.org

every time i use lazy-loading for a Set property of a POJO with org.springframework.orm.hibernate.HibernateTemplat e, it does not work because of session was closed. My question is if I CANNOT use ...

80. How to show the user a reconnection message    forum.springsource.org

How to show the user a reconnection message In this scenario: user is logged with acegi. Http session timed out -> authentication exception throwed (AuthenticationCredentialsNotFoundException) -> new logon "commenced" I'd like ...

81. Spring user groups?    forum.springsource.org

Spring user groups? I really enjoyed the spring experience and I got to thinking of ways to, somewhat, recreate that great learning experience by starting a local, Boston, user group. At ...

82. Validatiting User data    forum.springsource.org

Hi, I had a login form and want to forward to a success view once the user is valid. I wrote one class for data access. But where i can compare ...

83. Determining user in service layer    forum.springsource.org

Determining user in service layer I know that this has been asked before, and I've been through all the threads I can find on it. But I've not found a truly ...

84. Different thumbnail size for every user    forum.springsource.org

Different thumbnail size for every user I have the following task: I am working on imagebank. The images are stored on the server in quality that users upload it. By default ...

85. multi threads of the same user    forum.springsource.org

Hi, I'm using Acegi in a Swing application. swing happens to create threadsin its event mechanism and the problem is that the security context is not set in the thread loacl ...

86. How to start/find a local Spring User Group    forum.springsource.org

Hi All, How would one go about finding a local Spring User Group? Is there a central page I can look at? Even better does anyone know of one based near/around ...

87. Kicking a user off after they have been deleted/disabled    forum.springsource.org

This should happen automatically if you have alwaysReauthenticate set to true in FilterSecurityInterceptor and you evict any cached information for the user. Alternatively, you could probably use the concurrent session stuff ...

88. How to get User details    forum.springsource.org

Hi, I'm new to Acegi. I would like to access some properties for the user using the authz:authentication tag. I subclassed JdbcDaoImpl to add the new sql statement but now I ...

89. data source (new spring user)    forum.springsource.org

You can define a datasource like this: Code: Next you can inject thsi ...

90. User enabled/disabled means.......??    forum.springsource.org

User enabled/disabled means.......?? hi, If the user is disabled i,e. flag set to 'N' then acegi treats this as failure in logging in and re-routes to the login failure url. So ...

91. SpringOne and Spring User Groups    forum.springsource.org

92. Kicking authenticated users    forum.springsource.org

Hi, my web application provides a list of users that are currently logged in. I would like to be able to log out all users at once (or just a single ...

93. Obtaining user information prior to main window startup    forum.springsource.org

Obtaining user information prior to main window startup Hi folks, I am in a position where I would like to prompt the user for some information before creating the bulk of ...

94. What are considerations for creating user threads when using OSIV?    forum.springsource.org

What are considerations for creating user threads when using OSIV? Hi all, I am using OSIV (filter because it is a web app) but I want to create some user threads ...

95. User based data retrieval    forum.springsource.org

User based data retrieval Hy, I'm currently developing an application using spring/hibernate and tapestry. Data returned to the view tier of my application heavily depends on the rights/roles a logged-on user ...

96. User Profile Security    forum.springsource.org

User Profile Security I'm an acegi newb, but I'm hoping that I've come to the right conclusion here. I'm setting up a simple application but I want to have security around ...

97. Programatically determine the user's privileges    forum.springsource.org

Is there any way to programatically determine the user's privileges on an object? I'm using Acegi AOP interceptors on domain objects. One example usage: Disable GUI widgets for fields that the ...

98. What is the right way to get user's details?    forum.springsource.org

Quick question: Web application. Acegi is working/user is logged in. Now I need to get some data from DB and that data is referenced by user id (which is already loaded ...

99. MessageSource - ties to user/other    forum.springsource.org

MessageSource - ties to user/other What approach can be used to tie messages.properties file to a user/other upon log-in. Is it necessary to specify all possible files in the bean mapping ...

100. Avoid showing track trace to end user    forum.springsource.org

Hello, I tried to search this basic problem in forums & documentation , but I didn't find an answer. My application that is Spring-based throws exception in Spring framework class: org.springframework.beans.factory.BeanCreationExce ...