Service permission definition problem (ACEGI)

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

clincks

Hi,

I have a question about the security definition.
Let me explain the context:

<permissionSet type="ci:parent" expose="selected">
<permissionGroup name="myPerm" expose="true" allowFullControl="false" />
</permissionSet>‍‍‍‍

<permissionSet type="ci:child1" expose="selected">
<permissionGroup name="Admin1" expose="true" allowFullControl="false" requiresType="true">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <includePermissionGroup type="ci:parent" permissionGroup="myPerm"/>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </permissionGroup>
</permissionGroup>‍‍‍‍‍

<permissionSet type="ci:child2" expose="selected">
<permissionGroup name="Admin2" expose="true" allowFullControl="false" requiresType="true">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <includePermissionGroup type="ci:parent" permissionGroup="myPerm"/>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </permissionGroup>
</permissionGroup>‍‍‍‍‍

ci:child1 & ci:child2 inherit from ciarent (in the model)

I had an aspect "ci:child1" to a node.

Now, when I define my security on my service accessing this node:

<bean id="PersonService_security" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
&nbsp;&nbsp;&nbsp; <property name="authenticationManager"><ref bean="authenticationManager"/></property>
&nbsp;&nbsp;&nbsp; <property name="accessDecisionManager"><ref local="accessDecisionManager"/></property>
&nbsp;&nbsp;&nbsp; <property name="afterInvocationManager"><ref local="afterInvocationManager"/></property>
&nbsp;&nbsp;&nbsp; <property name="objectDefinitionSource">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <value>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; my.company.MyService.getNodeInfo=ACL_NODE.1.ci:parent.myPerm
</value>
&nbsp;&nbsp;&nbsp; </property>
&nbsp; </bean>‍‍‍‍‍‍‍‍‍

When I try to access, I get an "BAD CREDENTIAL EXCEPTION".

–> The node I try to access has ci:child1 aspect (who inherit from ciarent) but i looks like the ACEGI security doesn't know about the inheritance.

What is wrong in my approach???

Thanks a lot for help.

Stephane

andy

Hi

This does not look like it was rejected for the ACL settings but for the password.

Andy