Now the PrivilegeContext object is central and once the user logged in,
this object is bound to a ThreadLocal. From then there is no further
need to interact with the PrivilegeHandler - this allows for
authenticated users to get a remote copy of the PrivilegeContext so that
on a remote client, the user can check for permissions, without having
to do the round trip to the server.
A code review of this change would be good, but preliminary tests show
that it works. A test should now be implemented to check if getting a
remote copy also allows for authorization.
The log4j.xml configuration file is in the test resources and now the
project is completely free of a dependency to a concrete logging
implementation as all logging of the sources is done over slf4j
- The querying is done by passing a UserRep with all the fields set
which
need to be equal to select the user. Null fields are understood as not
required
- Performed further clean up in that all password variables have been
changed to type byte[].
- Cleaned up copyright notices in files
- fixed version of Privilege 0.1.0-SNAPSHOT in pom.xml
- Now a "mvn compile" will build the project
- Note, that since ch.eitchnet.utils is a dependency, it must be installed first using "mvn install" to be able to compile Privilege
Robert von Burg
Reto Breitenmoser