[DevAlternatives]

Hello,

My team is working on a Scaffold Customization project, and we had been required to create a -so called- Hybrid Security Strategy, by using LDAP Authentication and DB Authorization (customer requires to mantain user-roles, and option-roles configuration from DB tables).

LDAP part has been easy to implement, by using the normal LDAP authentication strategy, and Roles extraction was just matter of substituting the AuthoritiesPopulator inside the “userDetailsService” bean, , with another implementation of LdapAuthoritiesPopulator interface, that uses DataSource and queries to extract the roles.

But the challenging part is to Scaffold the menu options page by retrieving them from the DB configuration Tables. This idea implies that during scaffolding time, it is supposed to retrieve the options list, its roles, and create the “menu.jsp” with all of it, by using “crudDataTypeMenuSegment.jet”.

So, question number 1 is:
Is there any way to add this behavior to the scaffolding process? Maybe adding a subroutine to an existing java piece or modifying jet templates?

Question number 2 is:
For security at service’s methods level, we’re planning to extract the comments from the tables in the database (Oracle 10g), where we will put the list of roles that will have access to perform CRUD operations over the specific scaffolded entity.
Is it possible to retrieve the comments from database? which attribute in the “model” object holds this value (at services generation time)?

I have already checked this post from 2010 (ME8): http://www.myeclipseide.com/PNphpBB2-printview-t-26622-start-0.html
It suggested to activate Spring DSL to allow examine the content inside the .springDSL folder. But nothing is placed there after the activation.

Thanks for your help!

P.S.: This is a copy from this post from nhernandez user (he’s one of our developers) https://www.genuitec.com/forums/topic/questions-about-ldap-db-security-scaffold-customization/ , please remove the previous one.

[Author]

Posts