Java

How Can I Map An Access Path In Spring Security For A Single .Html Page Inside A Folder, Without Giving Access To All The Pages In Htat Folder

20-Apr-15 21:38

Please first read http://www.codeproject.com/Messages/3137511/Forum-Guidelines-PLEASE-READ.aspx[^]. Then go to http://docs.oracle.com/javase/tutorial/index.html[^] and use some of the tutorials to help you.

CodeZero216-Apr-15 4:09

CodeZero2

16-Apr-15 4:09

I'm working in a web application using spring mvc 4 (version: 4.0.9.RELEASE) and spring security 3 (version: 3.2.5.RELEASE), my problem is that i can't restrict access to specific view (.html page) inside a folder.

I have three (3) modules in my web application: Roles, Permissions, Users. Each module have CRUD operations (insert, create, read, delete). I have created twelve (12) permissions in forms of roles in my spring secuirty configuration, each permission would be in charge of a CRUD operation, i would have a permission to create users another one to delete roles and so on until i have 12 permissions.

I said that i created those permissions as roles is because in my web application i have a create role requeriment and in this requeriment i can create a new role and this new role can have permissions mixed from modules, i mean i can create a role that have a create user permission and also delete a role permission.

Beacuse of this i can´t have harcoded the access to the modules using roles in my spring security configuration , but since is not a requeriment to create new permissions i used the permissions to be hardcoded instead of the roles in my spring security configuration.

Even if i use this Spring EL expressions "hasRole", in my bussines logic the string i pass to that expression is a name of a permission that i have stored in my data base.

I have 3 folders: Roles, Permissions, Users; and each folder contains a page for each crud operation like this:

---Roles
  --addRole.html
  --deleteRole.html
  --readRole.html
  --insertRole.html

---Users (same level as Role)
  --.... the same as role but with users

---Permissions (same level as Role)
  --...the same as role but with permission

My problem is that i want to create my spring secuirty configuration to restrict access per page and not per folder, i would like to need to have a specific permission to access a page like this

SQL

.antMatchers("/addRole/").access("hasRole('PERM_ADD_ROLE')")
.antMatchers("/deleteRole/").access("hasRole('PERM_DELETE_ROLE')")
.antMatchers("/readRole/").access("hasRole('PERM_READ_ROLE')")
.antMatchers("/insertRole/").access("hasRole('PERM_INSERT_ROLE')"
.antMatchers("/addUser/").access("hasRole('PERM_ADD_USER')")
.antMatchers("/deleteUser/").access("hasRole('PERM_DELETE_USER')")

But when i do this if i log-in with a user that have PERM_ADD_ROLE this user have access to all the ROLE pages ( deleteRole, readRole an insertROle) and this shouldn't happen, the user should have only access to the addRole page since his permission is "PERM_ADD_ROLE", but since the other pages i mention are in the same folder Roles i believe thats why he access them but this shouldn't happen.

My project in spring mvc is configured using java config and no XMLs, i have my application configured with classes and not XML

Here is my spring security class configuration.

@Configuration
@EnableWebMvcSecurity
public class SecurityConfign extends WebSecurityConfigurerAdapter {

    @Autowired
    private AutProvider aut;

   @Override
    protected void configure( HttpSecurity http ) throws Exception 
    {
        http
            .authenticationProvider(aut)
            .authorizeRequests()
                .antMatchers("/resources/").permitAll()
                .antMatchers("/css/").permitAll() 
                .antMatchers("/js/").permitAll()
                .antMatchers("/img/").permitAll() 
                .antMatchers("/sound/").permitAll() 
                .antMatchers("/fonts/").permitAll()
                .antMatchers("/ajax/").permitAll()
                .antMatchers("/php/").permitAll()
                .antMatchers("/xml/").permitAll()
               .antMatchers("/addRole/").access("hasRole('PERM_ADD_ROLE')")
         .antMatchers("/deleteRole/").access("hasRole('PERM_DELETE_ROLE')")
             .antMatchers("/readRole/").access("hasRole('PERM_READ_ROLE')")
          .antMatchers("/insertRole/").access("hasRole('PERM_INSERT_ROLE')"<br />
               .antMatchers("/addUser/").access("hasRole('PERM_ADD_USER')")
         .antMatchers("/deleteUser/**").access("hasRole('PERM_DELETE_USER')")
                .anyRequest().authenticated()
                .and()
                .formLogin()
                    .loginPage("/login/login")
                    .permitAll()
                    .and()
                .logout()<br />
                    .permitAll()
                .and()
                    .csrf().disable();

    }
}

And here is my AuthenticationProvider class

@Component
public class AutProvider implements AuthenticationProvider {

@Override
public Authentication authenticate(Authentication authentication)
        throws AuthenticationException {

    String name = null;
    String password = null;
    Authentication auth = null;

    try {
        name = authentication.getName();
        password = authentication.getCredentials().toString();

        if (name.equals("admin@admin.com") && password.equals("password")) {
            List<GrantedAuthority> grantedAuths = new ArrayList<>();
            grantedAuths.add(new SimpleGrantedAuthority("PERM_ADD_ROLE"));
            grantedAuths.add(new SimpleGrantedAuthority("PERM_ADD_USER"));
            //i know that this part is hardcoded but i would have a method here to bring those permissions from the data base
            auth = new UsernamePasswordAuthenticationToken(name, password, grantedAuths);
        }
    } catch (AuthenticationException e) {
        e.printStackTrace();
        throw e;
    }

    return auth;
}

@Override
public boolean supports(Class<?> authentication) {
    return authentication.equals(UsernamePasswordAuthenticationToken.class);
}

}

and here is some of my controllers as and example the Role COntroller

@Controller
@RequestMapping("/roles/")
public class RoleController {

    @RequestMapping(value = "readRole", method = RequestMethod.GET)
    public String readArole(Model model) {

        return "/roles/readRole";
    }
}

In resume if i give a specifc permission to a user like PERM_ADD_ROLE with this permission the user have access to all the pages in the Roles folder and this shouldn't happen.

Re: How Can I Map An Access Path In Spring Security For A Single .Html Page Inside A Folder, Without Giving Access To All The Pages In Htat Folder

PIEBALDconsult16-Apr-15 4:27

PIEBALDconsult

16-Apr-15 4:27

Please don't double-post.

How Can I Map An Access Path In Spring Security For A Single .Html Page Inside A Folder, Without Giving Access To All The Pages In Htat Folder[^]

File Handling

Member 115824517-Apr-15 6:17

7-Apr-15 6:17

Some one help me with the second bit of this question

Java can work well with files. It is a matter of importing the relevant files in the java.io class and have
the files executed. In executing files, some times exceptions happen. For example, the file in code may
not be there on the disk. That makes the code unable to run properly. Therefore the exception has to be
either caught or thrown.
In this assignment, you are going to read data from a file and then write it in another file. The file
given 'marks.txt' should be written with the same data but in another file 'marks.xls'. Since the marks
are only coursework and Exam, in the marks.xls, indicate the final mark where final mark = cw*0.40 +
ex*0.60. Also indicate if the candidate Excelled (over 70%), passed (50% - 69) and Fail (Less than
50%)

Richard MacCutchan7-Apr-15 21:09

7-Apr-15 21:09

If this is question set by your professor, then I strongly suggest you find another course where the teacher actually understands the subject.

In the meantime, exactly what help do you need?

Member 115824519-Apr-15 8:34

9-Apr-15 8:34

just help me with the reading and writing part of the program that will read data from the created text file that contains the names and marks of students and then writes the read data to an excell files while commenting on their marks as stated in the questions

Richard Andrew x649-Apr-15 8:47

Richard Andrew x64

9-Apr-15 8:47

You keep saying "help me" but you fail to say what help you need.

The difficult we do right away...
...the impossible takes slightly longer.

Richard MacCutchan9-Apr-15 21:50

9-Apr-15 21:50

You can use the Scanner class[^] to read the input file, and follow the link that jschell gave you for writing.

Member 1158245111-Apr-15 5:04

11-Apr-15 5:04

Thanks Richard MacCutchan, I read through and it was helpful

jschell9-Apr-15 12:05

jschell

9-Apr-15 12:05

Member 11582451 wrote:
second bit of this question

Which is what exactly?

Following is java classes that you would use for reading/writing files.

http://docs.oracle.com/javase/7/docs/api/java/io/package-summary.html[^]

You can google for example on how to read a text file and write a text file.

Member 1158245111-Apr-15 5:02

how do i Make a function directory count

11-Apr-15 5:02

i want to read from a text file forexample me.txt and copy the text that is in me.txt and write it to a new excel sheet.

Member 115830955-Apr-15 19:36

Member 11583095

5-Apr-15 19:36

Hi,
How can i Make a function directory count that finds how many directories and sub directories are in a folder, and Make a directory Size recursive function that finds the size of each folder and sub folders.
The following can be an example of the result from your program.

CSS

Example result
Dir:c:\test\f1
File:t0.txt size 20 bytes
Folder: f1 size 20 bytes

[REPOST] Re: how do i Make a function directory count

Sascha Lefèvre5-Apr-15 20:15

Sascha Lefèvre

5-Apr-15 20:15

Please don't double-post.
How Can I Make A Function Directorycount That Finds How Many Directories And Subdirectories Are In A Folder[^]

code for extracting result to applet

hari@251-Apr-15 20:38

hari@25

1-Apr-15 20:38

java code for extracting result from command prompt to applet

Re: code for extracting result to applet

Richard MacCutchan1-Apr-15 21:16

1-Apr-15 21:16

See my answer below.

regarding applets

hari@251-Apr-15 20:36

hari@25

1-Apr-15 20:36

what is the code for collecting the information from the ms access database and display in the applets

Re: regarding applets

Richard MacCutchan1-Apr-15 21:16

1-Apr-15 21:16

Please read http://www.codeproject.com/Messages/3137511/Forum-Guidelines-PLEASE-READ.aspx[^]. A Google search will find you many tutorials and code samples.

java tables

Member 1068310231-Mar-15 12:57

Member 10683102

31-Mar-15 12:57

Am new to java tables in need of a code that can create the following interface of a message display board

Re: java tables

Sascha Lefèvre31-Mar-15 17:08

Sascha Lefèvre

31-Mar-15 17:08

Member 10683102 wrote:
the following interface

There's nothing following your first sentence.

Apart from that you usually write an interface manually.

Re: java tables

Richard MacCutchan31-Mar-15 21:36

I wrote a program for creating a table using JDBC concept ,i compiled and runned the program worked properly but when i open the sql command line to check whether the table is created but the table is not created please help me

31-Mar-15 21:36

Sorry, but this site does not provide code to order. Please read http://www.codeproject.com/Messages/3137511/Forum-Guidelines-PLEASE-READ.aspx[^]. There are many samples in http://www.codeproject.com/script/Articles/Latest.aspx[^] that may help you.

Spring MVC

Member 1157091231-Mar-15 9:04

Member 11570912

31-Mar-15 9:04

I am working in spring MVC project where I need to use jsp form to connect to database. we are using signupservice.java to map the form values to database. I have attached the coding here. I have set the values for firstName and lastName but I want the signupservice.java take the form value instead of assigned value.I tried to change the coding but it is not working.Can anyone suggest me Where I went Wrong????

Java

public void registerStudent(StudentVO studentVO){      

        System.out.println("*******Student userName*******"+studentVO.getUserName());   
        studentVO.setFirstName("firstName");
        studentVO.setLastName("lastName");
        studentVO.setValidationID("VID");       
        studentVO.setBirthDate(new Date());
        studentVO.setGender('M');
        studentVO.setGradeLevel(2);
        studentVO.setRewardPoints("rewardPoints");
        //studentVO.setAge(12);
        AddressVO addressVO = new AddressVO();
        addressVO.setStreetAddress("streetAddress");
        addressVO.setCity("city");
        addressVO.setState("st");
        addressVO.setEmail("email");
        addressVO.setZipCode("zip");    
        studentVO.setAddressVO(addressVO);

        Student student = new Student();
        student.setUserName(studentVO.getUserAccountVO().getUserName());
        student.setFirstName(studentVO.getFirstName());
        student.setLastName(studentVO.getLastName());
        student.setValidationID(studentVO.getValidationID());
        student.setDateCreated(new Date());
        student.setBirthDate(studentVO.getBirthDate());
        student.setGender(studentVO.getGender());
        student.setGradeLevel(studentVO.getGradeLevel());
        student.setRewardPoints(studentVO.getRewardPoints());
        //student.setAge(studentVO.getAge());
        Address address = new Address();
        address.setStreetAddress(studentVO.getAddressVO().getStreetAddress());
        address.setCity(studentVO.getAddressVO().getCity());
        address.setState(studentVO.getAddressVO().getState());
        address.setEmail(studentVO.getAddressVO().getEmail());
        address.setZipCode(studentVO.getAddressVO().getZipCode());
        address.setDateCreated(new Date());
        student.setAddress(address);
        UserAccount userAccount = new UserAccount();
        userAccount.setUserName(studentVO.getUserAccountVO().getUserName());
        userAccount.setUserRole(studentVO.getUserAccountVO().getUserRole());
        userAccount.setPassword(studentVO.getUserAccountVO().getPassword());
        userAccount.setDateCreated(new Date());
        student.setUserAccount(userAccount);
        this.studentDAO.registerStudent(student);
    }

}">

modified 31-Mar-15 16:58pm.

Murali Krishna Tunga31-Mar-15 4:23

Murali Krishna Tunga

31-Mar-15 4:23

program:

Java

import java.sql.;
import java.io.;
import java.lang.*;
class CreateTable2
{
    public static void main(String args[])throws Exception
    {
        try
        {
            Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
            Connection con=DriverManager.getConnection("jdbc:odbc:si83","SYSTEM","pass");
            Statement st=con.createStatement();
            String qry="create table sai(eno int primary key,ename varchar(10),sal double)";
            st.executeUpdate(qry);
            con.close();
        }
        catch(ClassNotFoundException e)
        {
            //System.out.println(e);
        }
    }
}

modified 31-Mar-15 12:14pm.

Re: I wrote a program for creating a table using JDBC ...

Richard MacCutchan31-Mar-15 6:16