acegi security

The goal of this package is to locate the AclEntrys that apply to a given domain object instance.

An AclManager has ultimate resposibility for obtaining the AclEntrys instances, with a provider-based implementation available via the AclProviderManager class (and its AclProvider interface.

It is recommended to use the net.sf.acegisecurity.ui.webapp package for standard web applications, as it has much lower configuration complexity.

• a CaptchaSecurityContext that overrides the default SecurityContext and holds some captcha related informations
• an abstract CaptchaChannelProcessorTemplate and its implementations that test this context according to the configuration
• a CaptchaServiceProxy and a CaptchaValidationProcessingFilter that alows to validate a captcha response and to update the CaptchaSecurity
• a CaptchaEntryPoint that redirects to a captcha page if the CaptchaChannelProcessor implementation decide so

A request context is associated with the current execution thread. It holds objects that would otherwise need to be included in many method signatures, such as for authentication.

The beans are wired as follows:

<bean id="test" class="org.springframework.remoting.httpinvoker.HttpInvokerProxyFactoryBean">
<property name="serviceUrl"><value>http://localhost/Test</value></property>
<property name="serviceInterface"><value>test.TargetInterface</value></property>
<property name="httpInvokerRequestExecutor"><ref bean="httpInvokerRequestExecutor"/></property>
</bean>

<bean id="httpInvokerRequestExecutor" class="net.sf.acegisecurity.ui.httpinvoker.AuthenticationSimpleHttpInvokerRequestExecutor"/>


The beans are wired as follows:

<bean id="test" class="org.springframework.remoting.rmi.RmiProxyFactoryBean">
<property name="serviceUrl"><value>rmi://localhost/Test</value></property>
<property name="serviceInterface"><value>test.TargetInterface</value></property>
<property name="refreshStubOnConnectFailure"><value>true</value></property>
<property name="remoteInvocationFactory"><ref bean="remoteInvocationFactory"/></property>
</bean>

<bean id="remoteInvocationFactory" class="net.sf.acegisecurity.ui.rmi.ContextPropagatingRemoteInvocationFactory"/>


The ProviderManager automatically publishes events to the application context. These events are received by all registered Spring ApplicationListeners.

A secure object is a term frequently used throughout the security system. It does not refer to a business object that is being secured, but instead refers to some infrastructure object that can have security facilities provided for it by the Acegi Security System for Spring. For example, one secure object would be MethodInvocation, whilst another would be HTTP {@link org.acegisecurity.intercept.web.FilterInvocation}. Note these are infrastructure objects and their design allows them to represent a large variety of actual resources that might need to be secured, such as business objects or HTTP request URLs.

Each secure object typically has its own org.acegisecurity.intercept package. Each package usually includes a concrete security interceptor (which subclasses {@link org.acegisecurity.intercept.AbstractSecurityInterceptor}, an appropriate {@link org.acegisecurity.intercept.ObjectDefinitionSource} for the type of resources the secure object represents, and a property editor to populate the ObjectDefinitionSource.

It is simple to create new secure object types, given the AbstractSecurityInterceptor provides the majority of the logic and other specialised packages provide the authentication, authorization, run-as replacement management and ContextHolder population.

Refer to the reference guide for information on usage.

The LDAP authentication provider package. Interfaces are provided for both authentication and retrieval of user roles from an LDAP server.

The main provider class is LdapAuthenticationProvider. This is configured with an LdapAuthenticator instance and an LdapAuthoritiesPopulator. The latter is used to obtain the list of roles for the user.

To use, simply add the ContextHolderAwareRequestFilter to web.xml.