All drools rules evaluating false?

[flopsi]

Hi!
I want to use Seam 2.2.0 GA with drools-based security, but in my tests every rule seems to be evaluated false. Authentification (via SSL) works fine by the way. Here are my configs:

WEB-INF/components.xml
----------------------
   <drools:rule-base name="securityRules" rule-files="security.drl"/>
   <security:rule-based-permission-resolver security-rules="#{securityRules}"/>
   <security:jpa-identity-store user-class="..." role-class="..."/>
   <security:remember-me mode="usernameOnly" cookie-max-age="2419200"/>


Stripped down security.drl, placed in WEB-INF/classes
-----------------------------------------------------
package Permissions;
import java.security.Principal;
import org.jboss.seam.security.permission.PermissionCheck;
import org.jboss.seam.security.Role;

rule doUpdateBlobTest
when
        $perm: PermissionCheck(action == "updateBlobTest", granted == false)
then
        $perm.grant();
end


Restricted component method
---------------------------
@Name("ppBlobtestHome")
public class PpBlobtestHome extends EntityHome<PpBlobtest> {
        ...
        @Override
        @Restrict("#{s:hasPermission(null, 'updateBlobTest')}")
        public String update() {
                ...
        }
        ...
}


IMHO the rule should always evaluate true, but running the app i always get the error:
javax.faces.el.EvaluationException: org.jboss.seam.security.AuthorizationException: Authorization check failed for expression [#{s:hasPermission(null, 'updateBlobTest')}]
The rule is so stripped down right now that i expect the problem results rather from not finding the rules at all than from rule evaluation, but i might be wrong...

Any help is greatly appreciated,
thanks a lot, and best regards
Flo

[balazska]

try to look at seam drools example apps.

[flopsi]

Hi!

I just wanted to state that i solved the issue. It seems that there were some libs missing, which is kind of strange cos my project was initially setup with seam-gen and according to Seam In Action there should be nothing else to do...
Second thing (which i discovered by finally looking at the sources) is that null for the target parameter is not allowed for some reason:

org/jboss/seam/security/Identity.java:
   public boolean hasPermission(Object target, String action)
   {
      ...
      if (target == null) return false;
      ...
   }

In my test-rules i did not use any target object, so i thought i could just pass null here. Now i pass some kind of dummy object, and it works...

Thanks, best regards
Flo

[sage.sam]

Florian Petersen wrote on Dec 22, 2009 15:26:


I just wanted to state that i solved the issue. It seems that there were some libs missing, which is kind of strange cos my project was initially setup with seam-gen and according to Seam In Action there should be nothing else to do...

Thanks for posting this little follow-up... you just solved my issue!