In my recent project, I want to implement permission based framework with spring security grails plugin.<\/p>\n
What does permission based framework mean?<\/p>\n
We can create a ROLE at run time based on the permission given to the user. Most of the times, we use Spring security in a way where we pre-define the roles to be used in our apps. But with the use of Permission, we can define the role at run time and assign permission as per our requirement.<\/p>\n
Let’s take an example : Suppose we have a controller named as PersonController<\/p>\n
[java]
\nclass PersonController {<\/p>\n
@Secured(‘ROLE_PERMISSION_PERSON_CREATE’)<\/p>\n
def create(){….}<\/p>\n
@Secured(‘ROLE_PERMISSION_PERSON_EDIT’)<\/p>\n
def edit(){…}<\/p>\n
@Secured(‘ROLE_PERMISSION_PERSON_SHOW’)<\/p>\n
def show(){….}<\/p>\n
@Secured(‘ROLE_PERMISSION_PERSON_DELETE’)
\ndef delete(){….}
\n}<\/p>\n
[\/java]<\/p>\n
In this example, we have defined four action, We want to create 2 roles like this :-<\/p>\n
So, for this, we have to define the different permissions to each action or may be you can define same permission to different action as same as we are defining roles in our projects.<\/p>\n
After that, we have to add a new domain named as Permission, we have to define the many to many relationship with Role domain.<\/p>\n
Role.groovy<\/p>\n
[java]
\nclass Role implements Serializable {<\/p>\n
String authority
\nDate dateCreated
\nDate lastUpdated<\/p>\n
static hasMany = [permissions:Permission]<\/p>\n
static mapping = {
\ncache true
\n}<\/p>\n
static constraints = {
\nauthority blank: false, unique: true
\n}
\n}
\n[\/java]<\/p>\n
Permission.groovy<\/p>\n
[java]
\nclass Permission implements Serializable {<\/p>\n
String name
\nstatic constraints = {
\n}
\n}
\n[\/java]<\/p>\n
In Bootstrap.groovy, you can bootstrap roles and permissions. See the code snippet below:<\/p>\n
Firstly you have to save different type of permissions that mentioned above the action name in @secured annotation and assign permission to each role as per your requirements.<\/p>\n
[java]
\nPermission createPermission = new Permission(name: ‘PERSON_CREATE’)
\ncreatePermission.save()<\/p>\n
Permission editPermission = new Permission(name: ‘PERSON_EDIT’)
\neditPermission.save()<\/p>\n
Permission deletePermission = new Permission(name: ‘PERSON_DELETE’)
\ndeletePermission.save()<\/p>\n
Permission showPermission = new Permission(name: ‘PERSON_SHOW’)
\nshowPermission.save()<\/p>\n
Role editRole = new Role(authority: ‘ROLE_EDIT_PERSON’, permissions: [createPermission, deletePermission, showPermission, editPermission])
\neditRole.save()<\/p>\n
Role showRole = new Role(authority: ‘ROLE_SHOW_PERSON’, permissions: [showPermission])
\nshowRole.save()
\n[\/java]<\/p>\n
You can create as many as can roles at run time and assign permissions to each role.<\/p>\n
You have to create one class in src\/groovy package CustomAuthority which will extends the GrantedAuthority
\nclass.<\/p>\n
[java]
\nimport org.springframework.security.core.GrantedAuthority<\/p>\n
class CustomAuthority implements GrantedAuthority {
\nprivate String authority;<\/p>\n
public CustomAuthority(String authority) {
\nthis.authority = authority;
\n}<\/p>\n
@Override
\npublic String getAuthority() {
\nreturn authority;
\n}<\/p>\n
@Override
\npublic int hashCode() {
\nreturn authority.hashCode();
\n}<\/p>\n
@Override
\npublic boolean equals(Object obj) {
\nif(obj == null) return false;
\nif(!(obj instanceof CustomAuthority)) return false;
\nreturn ((CustomAuthority) obj).getAuthority().equals(authority);
\n}
\n}
\n[\/java]<\/p>\n
Now, you have to override getAuthorities() method of the User.groovy file to use the permission for each role specific to users.<\/p>\n
[java]
\nSet getAuthorities() {
\nSet list = UserRole.findAllByUser(this).collect { it.role } as Set
\ndef roles = new HashSet()
\nroles.addAll(list)
\ndef newRoles = new HashSet()
\nlist.each { role ->
\nrole?.permissions?.each { permission ->
\nCustomAuthority customAuthority = new CustomAuthority("ROLE_PERMISSION_" + permission.name);
\nnewRoles.add(customAuthority);
\n}
\n}
\nreturn newRoles
\n}
\n[\/java]<\/p>\n
In this method, we are getting the different permissions from each role and assigning them to authority list.<\/p>\n
Now, your permission based framework is configured.<\/p>\n
It’s very powerful way to customize the roles in spring security, you don’t need to change the code when creating the role, you can customize roles based on permissions at run time.<\/p>\n
Hope this blog will give you the idea to integrate the spring security with permissions.<\/p>\n","protected":false},"excerpt":{"rendered":"
In my recent project, I want to implement permission based framework with spring security grails plugin. What does permission based framework mean? We can create a ROLE at run time based on the permission given to the user. Most of the times, we use Spring security in a way where we pre-define the roles to […]<\/p>\n","protected":false},"author":47,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":4},"categories":[7],"tags":[4840,9,1409,672],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/13205"}],"collection":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/users\/47"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/comments?post=13205"}],"version-history":[{"count":0,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/13205\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/media?parent=13205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/categories?post=13205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/tags?post=13205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}