Gustavo Salgado
Gustavo Salgado

Reputation: 417

Store Permissions for Apache Shiro

I'm starting with the framework Apache Shiro, I felt great and very flexible. Within an application we want to control permissions for certain parts of the web with jsp tags for "shiro: hasPermission".

Shiro I understand that things like this can tell Module4:action1, but for more complex scenarios as module1-> module1.1-> action3 not think of a structure to store this in the database.

enter image description here

Depending on the model of our application suggestion What I do to store the permissions on the database, What tables could use?.

Thanks In Advance

Upvotes: 3

Views: 769

Answers (1)

Les Hazlewood
Les Hazlewood

Reputation: 19547

Shiro's default WildcardPermission syntax can handle arbitrary numbers of : delimited tokens. You could get by on something as easy as defining your permissions as follows:

module1:module1.1:action3

etc.

This means you only need an association table, e.g. account_permissions that has an account_id and a permission string.

Upvotes: 3

Related Questions