topic Security interceptors in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/security-interceptors/m-p/158890#M112956 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>I'm trying to use security interceptors with our services (like "public-services-security-context.xml" file).</SPAN><BR /><BR /><SPAN>I have :</SPAN><BR /><BR /><SPAN>1- add interceptor in file : "knowings-resource-services-context.xml" :</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&nbsp;&nbsp;&nbsp;&lt;bean id="TaxonService"<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;class="org.springframework.aop.framework.ProxyFactoryBean"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="proxyInterfaces"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;list&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;com.knowings.kmsj.repo.taxonomy.ITaxonService<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/list&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="target"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;ref bean="taxonService" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="interceptorNames"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;list&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;idref local="ITaxonService_transaction" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;idref bean="AuditMethodInterceptor" /&gt;<BR />&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;idref bean="exceptionTranslator"/&gt;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;idref bean="ITaxonService_security"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/list&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/bean&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>2- add in file "knowings-resource-services-security-context.xml" :</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&nbsp;&nbsp;&nbsp; &lt;bean id="ITaxonService_security" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor" &gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="authenticationManager"&gt;&lt;ref bean="authenticationManager"/&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="accessDecisionManager"&gt;&lt;ref bean="accessDecisionManager"/&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="afterInvocationManager"&gt;&lt;ref bean="afterInvocationManager"/&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="objectDefinitionSource"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;com.knowings.kmsj.repo.taxonomy.ITaxonService.getAvailableTaxons=ACL_ALLOW<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;com.knowings.kmsj.repo.taxonomy.ITaxonService.getTemporaryTaxons=ACL_ALLOW<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/bean&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>&nbsp;&nbsp; </SPAN><BR /><BR /><BR /><STRONG>Here the problem :</STRONG><BR /><BR /><SPAN>This service calls an other custom service (no problem), and this last service call NodeService (with big N)</SPAN><BR /><SPAN>And, I have this error :</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />exception : net.sf.acegisecurity.BadCredentialsException: Bad credentials presented<BR />Bad credentials presented<BR />net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider - authenticate - 290<BR />net.sf.acegisecurity.providers.ProviderManager - doAuthentication - 159<BR />net.sf.acegisecurity.AbstractAuthenticationManager - authenticate - 49<BR />net.sf.acegisecurity.intercept.AbstractSecurityInterceptor - beforeInvocation - 372<BR />net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor - invoke - 77<BR />org.springframework.aop.framework.ReflectiveMethodInvocation - proceed - 176<BR />org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor - invoke - 49<BR />org.springframework.aop.framework.ReflectiveMethodInvocation - proceed - 176<BR />org.alfresco.repo.audit.AuditComponentImpl - audit - 241<BR />org.alfresco.repo.audit.AuditMethodInterceptor - invoke - 69<BR />org.springframework.aop.framework.ReflectiveMethodInvocation - proceed - 176<BR />org.springframework.transaction.interceptor.TransactionInterceptor - invoke - 107<BR />org.springframework.aop.framework.ReflectiveMethodInvocation - proceed - 176<BR />org.springframework.aop.framework.JdkDynamicAopProxy - invoke - 210<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><STRONG>Tests :</STRONG><BR /><BR /><SPAN>If I put "nodeService" (little n), it's ok, but it is not the solution for us and software craches later.</SPAN><BR /><BR /><SPAN>If in file "knowings-resource-services-security-context.xml", I put :</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&nbsp;&nbsp;&nbsp; &lt;!– to test it –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;bean id="ITaxonService_security" class="org.alfresco.repo.security.permissions.impl.AlwaysProceedMethodInterceptor" <BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>It's Ok with using NodeService and I have the rights.</SPAN><BR /><BR /><SPAN>=&gt; I think I made mistakes in security rules :</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.getAvailableTaxons=ACL_ALLOW<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.getTemporaryTaxons=ACL_ALLOW<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Have you any idea ?</SPAN><BR /><BR /><SPAN>Regards,</SPAN></BODY></HTML> Tue, 12 Feb 2008 14:13:24 GMT tcaiati 2008-02-12T14:13:24Z Security interceptors https://connect.hyland.com/t5/alfresco-archive/security-interceptors/m-p/158890#M112956 Hi,I'm trying to use security interceptors with our services (like "public-services-security-context.xml" file).I have :1- add interceptor in file : "knowings-resource-services-context.xml" :&nbsp;&nbsp;&nbsp;&lt;bean id="TaxonService"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;class="org.springframework.aop.framework.ProxyFactoryBean"&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;pr Tue, 12 Feb 2008 14:13:24 GMT https://connect.hyland.com/t5/alfresco-archive/security-interceptors/m-p/158890#M112956 tcaiati 2008-02-12T14:13:24Z Re: Security interceptors https://connect.hyland.com/t5/alfresco-archive/security-interceptors/m-p/158891#M112957 <HTML><HEAD></HEAD><BODY><SPAN>hi,</SPAN><BR /><BR /><SPAN>We have find the solution, thanks Philippe De RIVAROLA <img id="smileyvery-happy" class="emoticon emoticon-smileyvery-happy" src="https://connect.hyland.com/i/smilies/16x16_smiley-very-happy.png" alt="Smiley Very Happy" title="Smiley Very Happy" /> </SPAN><BR /><BR /><SPAN>In fact, ITaxonService extends IResourceService</SPAN><BR /><SPAN>and IResourceService has 2 methods : getResource and getResources, we must declare theses methods in rules :</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.createAdminTaxon=ACL_NODE.0.sys:base.CreateChildren<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.createUserTaxon=ACL_NODE.0.sys:base.ReadChildren<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.validateTaxon=ACL_PARENT.0.sys:base.WriteProperties<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.deleteTaxon=ACL_NODE.0.sys:base.DeleteNode<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.getAvailableTaxons=AFTER_ACL_NODE.sys:base.ReadProperties<BR />com.knowings.kmsj.repo.taxonomy.ITaxonService.getTemporaryTaxons=AFTER_ACL_NODE.sys:base.ReadProperties&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; com.knowings.kmsj.repo.parameter.IResourceService.getResource=ACL_NODE.1.sys:base.ReadProperties,AFTER_ACL_NODE.sys:base.ReadProperties<BR />com.knowings.kmsj.repo.parameter.IResourceService.getResources=ACL_NODE.1.sys:base.ReadProperties,AFTER_ACL_NODE.sys:base.ReadProperties<BR /><BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>So, if security conf is not good, services could not work well and logs doesnot help us …</SPAN><BR /><BR /><SPAN>Regards,</SPAN></BODY></HTML> Wed, 13 Feb 2008 09:08:29 GMT https://connect.hyland.com/t5/alfresco-archive/security-interceptors/m-p/158891#M112957 tcaiati 2008-02-13T09:08:29Z