Re: Authorization frustration

Thanks Mike.  I was in that vicinity trying to find my solution.  Turns 
out i was using the Prompt model, and my configuration was missing a 
<instance> element.  getInstanceIdentifier then returned "unknown" (by 
default), but auth was only configured for "all".  My "normal" models 
were setup properly for my test user though, and worked like a charm. 
Am using config authorization btw.  Maybe if configured for instance 
"all", authorization should not check for exact match with instance "all"?

Looks like after a large headache, i at least understand whats going on 
a little better now. The documentation was not bad, I was just groping 
for a concrete example somewhere, and didn't find it.

thanks again,
gene

Michael Nash wrote:
> Gene:
> 
> The quick answer is the table ComponentSecurity needs an entry for your
> model. Have a look at the existing records. (I'm assuming your using the
> default table-based security implementation)
> 
> Longer answer: If a component (which a model is) is Securable, it uses
> ComponentSecurity. If it's InstanceSecurable, InstanceSecurity is the
> able, and if InvokationSecurable, then InvokationSecurity is used.
> 
> HTH!
> 
> Mike
> 
> On Thu, 2004-12-02 at 18:28, Gene wrote:
> 
>>I'm having incredible trouble getting my tiny brain around the 
>>authorization entries.  I'm getting the following exception:
>>java.lang.SecurityException: Could not run model 
>>'oscn.prompt-lookupCaseMaster' for role 'org.keel.services.model.Model', 
>>Service 'org.keel.services.model.Model/oscn.prompt-lookupCaseMaster' Not 
>>Authorized
>>
>>
>>I have a user, 'USER1', and a group, "GROUP1", that USER1 belongs to, 
>>that I need to give full access to this model.  Can someone give me an 
>>example of the configuration/db entry of the component that I need to 
>>add to allow this?  Point me to a wiki?  Anything?
>>
>>the model is configured as:
>>
>>     <prompt activation="request" logger="oscn" 
>>id="oscn.prompt-lookupCaseMaster">
>>       <group>root</group>
>>       <group>GROUP1</group>
>>       <input label="" name="appealNumber"/>
>>       <command label="Find Case" model="oscn.process-findCaseMaster" 
>>name="find"/>
>>     </prompt>
>>
>>sorry to be so daft
>>
>>gene
>>
>>
>>_______________________________________________
>>User mailing list
>>[email protected]
>>http://lists.keelframework.org/listinfo.cgi/user-keelframework.org
> 
> 
> _______________________________________________
> User mailing list
> [email protected]
> http://lists.keelframework.org/listinfo.cgi/user-keelframework.org
> 
>