Spring Security Permissions

Asked

Viewed 490 times

0

I am developing a system for my college TCC. I am creating the user authentication part. I wonder if someone has a simple example of Spring Security configuration of users who have more than one permission, that is, a user who can access more than one function of the application. Example, user who accesses both financial and HR, without I have to create a new login for the user. My DB has the user table and scroll (which keeps the permissions). I believe I made myself clear in my question, I just want a simple example or a hint of how to do it and whether I should create more than one configure method.

Thanks!!!

java web-application spring-security

  • What is missing is the table that will relate the USER to the ROLE. With this table a user can have several ROLES and a ROLE can belong to several users.

  • If it doesn’t work, the implementation varies slightly between versions

1 answer

0

You could add a table of permissions in the database for users with many relationship to one, so a user could have an access permission and another from Adm, for example.

Code, using Hibernate Annotations:

    @ElementCollection(targetClass = String.class)
    @JoinTable(name="usuario_permissao", uniqueConstraints = 
          {@UniqueConstraint(columnNames = {"usuario", "permissao"})},
          joinColumns = @JoinColumn(name = "usuario"))
    @Column(name = "permissao")
    private Set<String> permissao = new HashSet<String>();

Then when you register users set the default permissions:

    public void salvar(Usuario usuario){
        Integer codigo = usuario.getUsuario();
        if(codigo == null || codigo == 0){
            // adiciona permissao usuario
            usuario.getPermissao().add("ROLE_USER");
            this.usuarioDAO.salvar(usuario);
        }else{
            this.usuarioDAO.salvar(usuario);
    }
}

And for specific users add permissions separately, for example:

            // adiciona permissao adm
            usuario.getPermissao().add("ROLE_ADM");
            // salva...

I hope I’ve helped

Browser other questions tagged java web-application spring-security

You are not signed in. Login or sign up in order to post.