Studying Acegi

Acegi主要的功能包括认证(Authentication)和授权(Authorization)。认证顾名思义就是确定该用户是否有权限登陆系统。而授权则是根据用户的信息得到该用户在本系统中可以进行的操作。
Acegi has provided about 14 authentication rules. Form Based Authentication and DAO Authentication has been widly used in development. In the framework of acegi, you can config the rules used in the system vsi ProviderManager(org.acegisecurity.providers.ProviderManager).For example:

xml 代码

1. <bean id="authenticationManager"  
2.         class="org.acegisecurity.providers.ProviderManager">  
3.         <property name="providers">  
4.             <list>  
5.                 <ref local="daoAuthenticationProvider" />  
6.             list>   There are some problems in these editor system so i just paste the coder.
7.         property>  
8.     bean>  
9.     <bean id="daoAuthenticationProvider"  
10.         class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">  
11.         <property name="userDetailsService" ref="inMemoryDaoImpl" />  
12.     bean>  
13.     <bean id="inMemoryDaoImpl"  
14.         class="org.acegisecurity.userdetails.memory.InMemoryDaoImpl">  
15.         <property name="userMap">  
16.             <value>  
17.                 wangwei=123,ROLE_SUPERVISOR    
18.                 user1user1=user1,ROLE_USER   
19.             value>  
20.         property>  
21.     bean>  

In xml you should define like this:

xml 代码

1. <filter>  
2.   <filter-name>AcegiFilterChain</filter-name>  
3.   <filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>  
4.   <init-param>  
5.     <param-name>targetClass</param-name>  
6.     <param-value>org.acegisecurity.util.FilterChainProxy</param-value>  
7.   </init-param>  
8. </filter>  
9. <filter-mapping>  
10.   <filter-name>AcegiFilterChain</filter-name>  
11.   <url-pattern>/*</url-pattern>  
12. </filter-mapping>