4a40d80da1
SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority.
...
It should be noted that equality checks or lookups with Strings or other authority types will now fail where they would have succeeded before.
15 years ago
bdb906e588
Enable parameterization for log levels in logback files to allow the use of command-line options for controlling log output.
16 years ago
b39b63bf3d
Add logback configuration for contacts sample.
16 years ago
c37ca1c2a9
Sample app build adjustments to remove unwanted deps such as jsp-api, tidy up use of JSTL, make sure all are using servlet 2.5 etc.
16 years ago
992566b6cb
SEC-1527: Internationalization of contacts sample (Adding message resource bundle and RequestContextFilter). Re-working of L12n section of manual to mention existing localized message files and use of RequestContextFilter.
16 years ago
1a838c2049
SEC-1533: AclAuthorizationStrategyImpl can now take either one or three GrantedAuthority arguments. If only one is supplied, it will be used for all 3 of the permissions supported by the class.
16 years ago
85c4c91e0e
IDEA inspection refactorings.
16 years ago
413b2a06e3
Improvements in up-to-date checking and use of parallel tests where possible.
16 years ago
c4ee46824c
Removing log4j.properties files and adding logback config ones.
16 years ago
2d9a848265
Added missing gradle build files for remaining samples. Some related reordering, dependency fixing etc. CAS sample no longer requires two separate subprojects as both client and server app can be run from a single gradle build.
16 years ago
080430150a
SEC-187: Refactoring contact Dao to use JdbcTemplate, and removing unused query objects (which have been there since 2004!)
16 years ago
a421370a3d
SEC-1465: Change DelegatingMethodSecurityMetadataSource to use constructor injection to get round the problem of it being invoked before it has been initialized properly. Also changed the contacts tests to use the same app context and loading order as the actual webapp, to give better reassurance that the app will run successfully.
16 years ago
b37d2ed978
SEC-593: Added PermissionCacheOptimizer strategy interface and implementation in Acl module.
...
This is used by DefaultMethodSecurityExpressionHandler to allow permissions to be cached before repeatedly evaluating an expression for a collection of domain objects.
16 years ago
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
be72ed1350
Remove commented out beans from contacts sample app context.
...
These were left when the app was updated to use Spring MVC @Controller syntax and scanning.
16 years ago
893f212fa5
Tidying
16 years ago
aeed49393c
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
16 years ago
fac07ba8ff
Schema updates to Spring 3.0
16 years ago
cb643f73de
Tidying up.
17 years ago
1286741c7c
SEC-1259: Improve consistency of authentication filter names.
17 years ago
3f70d79df5
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances.
17 years ago
5bdfd8cd77
Tidying imports etc to remove compiler warnings.
17 years ago
0d7b990e0a
SEC-1184: Moved ACL cache classes and interface out of jdbc package.
17 years ago
5953af0f6b
SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements).
17 years ago
853b4c8753
SEC-1186: Make sure an Element is always supplied when registering the AuthenticationManager. Fixes broken tests.
17 years ago
408e982b96
Minor JSP classname fixes etc in samples
17 years ago
f976080d1d
Fixes to sample app context files
17 years ago
14c4739605
SEC-1158: Decoupling of Pre/Post annotations implementation from Spring EL.
17 years ago
331a04c07c
Some changes to make it easier to run the sample with the database driver as part of the jetty plugin configuration, preventing classloader leaks.
17 years ago
e1bc1819da
SEC-1150: Update Contacts sample to use modernized Spring MVC controllers
17 years ago
e94baf38b3
Tidying up to remove warnings (generics, use of deprecated test classes etc).
17 years ago
13af4b95a2
Sample package name updates
17 years ago
101203b44d
SEC-1132: Updates to samples to reflect ACL refactoring.
17 years ago
93bdcccaee
SEC-1132: Moved userdetails into core and added core/authority sub-package
17 years ago
ca7d055c2b
SEC-1132: Created core and authentication packages within core module.
17 years ago
9efb5a7007
SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet
17 years ago
bec84f874a
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
17 years ago
2a9a8a41db
SEC-1125: Created separate web module spring-security-web
17 years ago
d6ee9a9a93
Commented out hessian and burlap remoting beans to avoid missing class exceptions on startup
17 years ago
4a41416c9b
Tidying up and removing compiler warnings.
17 years ago
0d7002e322
SEC-1012: Extra fixes to dependent modules following changes to Acl APIs.
17 years ago
8154161ef5
SEC-1035: Updated build to use Spring 3.0.0.M1 Release
17 years ago
7fa9a959b5
Added webAppRootKey context-param to samples to prevent conflicts when run together in Tomcat.
17 years ago
bc6878c1c5
SEC-1044: Removed remember-me functionality from http auto-config namespace configuration. Added explicit <remember-me> elements to contacts and tutorial sample configurations.
17 years ago
3cbad3ebd7
Corrected comment.
17 years ago
f3b3004085
Removed references to Acegi in contacts sample home page
17 years ago
78065ba47c
Fixed up contacts sample: removed casfailed page, corrected debug.jsp errors and fixed incorrect bean reference in context files.
17 years ago
3261fcb174
Tidying stuff
17 years ago
464da0f0df
SEC-999: Refactored namespace to take an expression handler instead of a permission evaluator, allowig fo greater cusomtomization and for a single handler to be used in both web and method security expressions.
17 years ago
e5b1073501
SEC-1012: Added more generics and warning suppression
17 years ago
Luke Taylor