Authorisation and restriction

[lasansue.jeremy.girard.satives.fr]

Hi all.

I'm writing a mini blog plateforme.
I've got display page (blog) and edit page (modify a post).

How can i manage access control on edit page. Only the post owner can access this page.

Thanks.

[lasansue.jeremy.girard.satives.fr]

Maybe by extending Identity class and overriding hasPermission() method ?

[mars1412]

look at the blog example in your seam installation

[shane.bryzak]

I would look at the seamspace example, it has plenty of examples of controlling who has access to perform various actions.

[lasansue.jeremy.girard.satives.fr]

Thanks all.

I manage to do what i need by extending the seam Identity class using

@Name("org.jboss.seam.security.identity")

Then i could override the hasRole and hasPermission moethod to perform my authorisation stuff by injecting entityManager