Jan 21, 2014

I was recently given a requirement to drive the entity attribute validations at runtime rather than at design time, with the following criteria. Ability to change fields to required at runtime. To be able to define validation message for field at runtime Define validations such as field must be numeric, or contain only alphabets (Used Regular expression...

Posted on Tuesday, January 21, 2014 by Unknown

Jan 11, 2014

In the previous posts i have covered the API usage and configuration for fortress and a sample login process. In this post i will give an example of how to write your custom ELResolver to check for permission or roles. The following snippet contains codes for custom ELResolver and helper classes used by it. The following class checks for permission and roles.   public class FortressSecurityResolver extends ELResolver { public static final ADFLogger FortressRoleResolver = ADFLogger.createADFLogger(FortressSecurityResolver.class); ...

Posted on Saturday, January 11, 2014 by Unknown

In the previous post i discussed about fortress and its directory structure. In this post i will cover the configuration for securing ADF application, using fortress API, writing your own custom ELResolver for doing permission or role checks.   Configuration: Fortress uses a properties file fortress.properties for storing configuration that...

Posted on Saturday, January 11, 2014 by Unknown

In this post i will discuss a security solution that one can use to secure their ADF essentials or ADF application. The solution to secure the application utilizes OpenLDAP and fortress. Fortress provides both RBAC(Role based access control) and ARBAC(Administrative role based access control) and OpenLDAP serves as a LDAP directory. Fortress also comes...

Posted on Saturday, January 11, 2014 by Unknown