RBAC with EJB & Jboss

[aanshu_2302]

HI,

I am working on an enterprise application which needs to have a RBAC. Admin can create users and assign roles which will change dynamically. Users will be given permissions to access particular features of Web Console.

How do we solve this problem? I have a database where in I have roles mapped with the url's. I want to make sure that my backend is secured and RBAC changes dynamically.

Can anyone give any pointers.

I am using EJB 3.1, JPA(Hibernate), RestEasy. Jboss 7.1.1.Final

Thanks in advance.

Best Regards,

Anshu

[ctomc]

Hi,

this is feature that was added to AS/WildFly 8,

Brian put together some nice videos on how to use it here http://vimeo.com/album/2599182

--

tomaz

[aanshu_2302]

Hey Tomaz,

Thanks for your reply. But, wildfly is still in beta and I am not sure if JEE7 is matured enough to switch.

Are there ways we can do this? We can have interceptors but they all are static. My requirement is to be dynamic.

Also, multitenancy support is not there is jboss 7 with jpa as the provider. Any ways to implicitly use Discriminator approach?

Please provide some pointers.

Thanks for help

[pmm]

Just for clarification: are you talking about the JBoss/WildFly AS management interface or a normal EE application deployed in JBoss/WildFly AS?

[aanshu_2302]

I am talking about a Java EE app deployed on Jboss 7.

[pmm]

In this case you need to use a login module either the default database login module or a custom one and the Java EE secuirty (@RolesAllowed).