JS behaviour for a user with multiple roles

[Gaby38]

Hello,

What is the behaviour of jasperserver for a user which has multiple roles. In particular, what does JS if I have defined a home page for ROLE_ONE and another home page for ROLE_TWO and the user belongs to both roles?

What are also the rules for rights on html files execution which are inside the file "applicationContext-security.xml"?

Thanks for explanations to come

[Gaby38]

Nobody has encountered this interrogation?

In my case, I have defined specific roles to which I mapped specific home pages. But if I add the role "ROLE_USER" for instance to a user which has always a specific role, then the home page becomes the "standard" repository tree of the user role.

So I think that some roles are "privilegied".

Has anybody an idea about that metaphysic question?

[mmflynn]

I am not an expert in this area, but I can point you to where you need to look. You need to configure Acegi (aka Spring Security), specifically the Voter Logic. Do a search for "acegi voter" or "accessdecisionmanager" to get started.

 

I have used this article in the past to help me set up LDAP. There's a brief section on voter logic:

 

 

Configuring the access decision manager

The accessDecisionManager decides whether a user is allowed to access a resource. Acegi provides a number of access decision managers, which vary in how they make access control decisions.

http://www.ibm.com/developerworks/java/library/j-acegi2/

HTH

Mary

[Gaby38]

Mary,

Thanks for the links to ACEGI. I will have a look on them.

If I have a clear idea of what are the rules, I will put my understanding on this forum.