jeudi 26 février 2015

Different ways to implement security using spring security framework



I am new to spring security framework.I was just compiling the various ways to add security features using spring security annotations or spring security framework.


Found the below so far.



  1. Full Page Authorization example: <intercept-url pattern="/user/**" access="hasRole('ROLE_USER')" />


  2. In-Page Authorization


    example : <security:authorize access="hasRole('ROLE_ADMIN')">




  3. Method Level Authorization - @PreAuthorize,@PostAuthorize,@PreFilter,@PostFilter




I am not sure if this is an exhaustive list to secure the application. Need some help for the same. Thanks.




Aucun commentaire:

Enregistrer un commentaire