Over a million developers have joined DZone.
{{announcement.body}}
{{announcement.title}}

Configure Domain Object Security (ACL) With Spring Security 3 and Oracle XE

DZone's Guide to

Configure Domain Object Security (ACL) With Spring Security 3 and Oracle XE

· Java Zone
Free Resource

Managing a MongoDB deployment? Take a load off and live migrate to MongoDB Atlas, the official automated service, with little to no downtime.

I recently configured a domain object's security with Spring Security 3 and Oracle. Since I couldn't find much about that topic, I thought that I would share my solution. I assume that you are familiar with Spring and will not describe how to configure the base application.

First we need the four tables for the default JDBC implementation of Spring-Security acl.
These are:

ACL_SID


ACL_CLASS


ACL_OBJECT_IDENTITY


ACL_ENTRY


We also need a trigger for the id of each table. You can create a trigger for each table with the following script. Don't forget to replace the red marked names for each table.

In our applicationContext we need a dataSource bean for the Oracle XE database:

After this preparation we can configure the Spring Security acl with Spring-el. I used an extra context file called "applicationContext-ACL.xml". For an Oracle DB we need to adapt the identity queries the acl service uses like the following:



Look at my example applicationContext-ACL.xml for the other required bean configurations.

Now you can use the aclService to create acl entiries for your business objects and the Pre- and Post- Authorize or Filter annotations to protect them.

Also have a look at the Spring documentation:
Domain Object Security (ACLs)
@Pre and @Post Annotations
ACL Schema

MongoDB Atlas is the easiest way to run the fastest-growing database for modern applications — no installation, setup, or configuration required. Easily live migrate an existing workload or start with 512MB of storage for free.

Topics:

Opinions expressed by DZone contributors are their own.

THE DZONE NEWSLETTER

Dev Resources & Solutions Straight to Your Inbox

Thanks for subscribing!

Awesome! Check your inbox to verify your email so you can start receiving the latest in tech news and resources.

X

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}