[progress Communities] [progress Openedge Abl] Forum Post: Re: User Authentication And Roles

  • Thread starter Thread starter Irfan
  • Start date Start date
Status
Not open for further replies.
I

Irfan

Guest
Hi Giorgi, The DataServices used by kendoUI builder are running in the PASOE server. In PASOE, we use Spring Security for Authentication and Authorization. For your question regarding Authorization, you can modify the authorization roles in your /webapps/ /oeablSecurity.csv file. Lets consider authorization for the following URL's localhost:8810/.../getcustomer localhost:8810/.../createcustomer Now if you wish to all users to allow access to "getcustomer" URI and only admin user to perform "createcustomer" then your URI would look like this for form-local authentication "/rest/SportsService/getcustomer","*","hasAnyRole('ROLE_PSCUser')" "/rest/SportsService/createcustomer","*","hasAnyRole('ROLE_PSCAdmin')" With this change PSCUser,PSCAdmin & PSCDebug can access "getcustomer" and only PSCAdmin can access "createcustomer" service. You can look at the role definitions for basic/form local in /webapps/ /users.properties file.

Continue reading...
 
Status
Not open for further replies.
Back
Top