浆糊
2002-09-19 13:47
恩,是啊。你觉得怎么样?

banq
2002-09-19 14:07
说说看visitor如何作权限访问?

JAAS你们知道吗,好像不错,不知道用在资源级别控制上的情况怎么样?

浆糊
2002-09-19 14:29
JAAS好象是不错,但是没有用过

cc
2002-09-19 15:18
This paper explains how to use the Java Authentication and Authorization API (JAAS). It plugs JAAS into the Struts framework. Though this paper focuses on Struts, and in particular the example application distributed with Struts, the lessons learned should be applicable to any MVC web framework.

In addition, while there are many articles on authentication with JAAS [1], [2] , using the API for authorization is relatively undocumented [3]. This paper will show how to use JAAS to secure resources in an MVC architecture.

There are two points of integration with Struts. During the login process and when the client requests a resource from Struts (which will usually be a URL). At each of these points, the application should defer to JAAS classes to perform the action.

This paper will first examine the JAAS infrastructure and then explain how the integration outlined above took place.

http://www.mooreds.com/jaas.html

cc
2002-09-19 15:25
权限用Visitable有些不妥吧,所有的权限是不同实例,而Visitable要求是具有相同抽象类的不同的类。怎么用呢??

猜你喜欢
2Go 上一页 1 2