tags:

views:

45

answers:

2

I have been put on to a project using Nuxeo, late in it's lifecycle and need to change a few things before it goes live.

I am having trouble finding out where I need to look to lock down a Nuxeo based application so that a user is redirected to the login page if they are unauthorised and access a restricted page.

Can someone please shoot my some direction on where this sort of logic is kept or defined?

A: 

A good option for wrapping security around an existing application is Spring Security. It's implemented as a serious of filters, doesn't require the application itself to use Spring, and has a very flexible API for integrating with your application's own security infrastructure.

skaffman
Thanks for the reply. I'm experienced in Spring Security but in this case this is not going to work. Nuxeo is an open source framework, built on JBoss Seam, for creating applications and as I mentioned I have come in close to the end of the project so we are not about to implement a new technology at this point in time. Plus, I don't think Spring Security is a good solution for this scenario as Nuxeo has it's own security model implemented in it. I'm really after someone that understands how to use that. Thanks again for your reply though.
Aaron Chambers
A: 

I have never used Nuxeo before, but if it is a normal seam application, that would be done in pages.xml:

<pages login-view-id="/login.xhtml">

<page view-id="/members/*" login-required="true"/>

...

</pages>
shipmaster
Yes, I'm well experienced with Seam. But Nuxeo is a framework that uses Seam under the covers. Hence, it is not a normal Seam application
Aaron Chambers