Where to define user roles in a spring protlet application?

Question

In my Spring portlet controller, I have a method annotated like this:

@PreAuthorize("hasRole('ROLE_BankUser')

Now when a user logs in to the portal and tries to access the portlet, where from will this method know if the user has a role of 'ROLE_BankUser'? Is it going to be defined in the LDAP where the user has all other credentials(like login and password)?

Maksym Demidas · Accepted Answer · 2013-01-10T11:28:32.133

0

Check your SpringSecurity configuration. Which AuthenticationProvider implementation do you use? In a case of LDAP it may be LdapAuthenticationProvider. If it's true then you can check how LdapAuthenticationProvider.authenticate(Authentication authentication) method is implemented. It will load roles from LDAP via some LdapAuthoritiesPopulator implementation (depends on your configuration)

edited Jan 10 '13 at 11:28

answered Jan 10 '13 at 10:26

Maksym Demidas

7,707
1
29
36

We are using AuthenticationUserDetailsService.loadUserDetails method – Victor Jan 10 '13 at 22:34

Where to define user roles in a spring protlet application?

1 Answers1