give access with spring security in xml file for one user

Question

I was using waffle and spring security 3.2 to set access to jsf2 pages. I used this example

Everything works fine, but I am curious, if posible to set access to page via xml file for one user??? Something like that:

 <sec:intercept-url pattern="/**" access="PRINCIPAL='tom'" />

I couldn't find answer in internet

Thanks

score 1 · Accepted Answer · answered Aug 27 '13 at 21:12

1

Yes it is possible if you use SpEL expressions:

<sec:http use-expressions="true">
    ....
    <sec:intercept-url pattern="/**" access="principal.name=='tom'" />
    ....
</sec:http>

answered Aug 27 '13 at 21:12

Maksym Demidas

You are welcome. @Darka, I've seen your edit for my answer that was rejected. You can post `authentication.name` way as a separate answer and accept it. – Maksym Demidas Aug 28 '13 at 15:26
thanks again, but I wlll leave your answer. I think it depends from configuration. – Darka Aug 28 '13 at 18:28

score 0 · Answer 2 · answered Aug 28 '13 at 18:28

0

Using @Maksym answer I found my solution (I think in some cases both can be right) :

<sec:http use-expressions="true">
    ....
    <sec:intercept-url pattern="/**" access="authentication.name=='tom'" />
    ....
</sec:http>

answered Aug 28 '13 at 18:28

Darka

2 Answers2