securityconfig.properties

我在加拿大学习的一个比较复杂的在线银行程序.

##
# This properties file defines the functions and table columns
# security constraints information.

# Defining Role name. The role names defined in deployment descriptors
# must be also defined here and the role names defined here
# must match the role names defined in the deployment descriptors

role1=Admin
role2=PFSOfficer
role3=TSClerk
role4=Clerk
role5=Cardholder

# Defining access for functions.
# This defines the functions that are restricted or authorized for the specified roles.
# The defined functions for any role must be either restricted or authorized, and they
# can not have both in one role

# Role1 have full function access to the application
role1.restricted.function1=NONE

#Role2 have full function access except the following functions
role2.restricted.function1=Cardholder.Register
role2.restricted.function2=Cardholder.ChangePassword
role2.restricted.function3=Cardholder.Delete

# Role3 has access to the following functions
role3.authorized.function1=View
role3.authorized.function2=Cardholder.ResetPassword
role3.authorized.function3=Address.Update
role3.authorized.function4=Address.Save
role3.authorized.function5=Address.Delete
role3.authorized.function6=Account.Transfer

# Role4 has access to the following functions
role4.authorized.function1=Cardholder.View
role4.authorized.function2=Address.View
role4.authorized.function3=Account.View
role4.authorized.function4=Account.Transfer
role4.authorized.function5=Account.Withdrawal
role4.authorized.function6=Account.Deposit
role4.authorized.function7=Account.PayBill

# Role5 has access to the following functions
role5.authorized.function1=Cardholder.Register
role5.authorized.function2=ClientCard.ChangePassword
role5.authorized.function3=Statement.View
role5.authorized.function4=Account.Transfer
role5.authorized.function5=Account.Withdrawal
role5.authorized.function6=Account.Deposit
role5.authorized.function7=Account.PayBill
role5.authorized.function8=Account.View

# Defining restrictions for table columns.
# This defines the table columns that are restricted for the specified roles
# The value is divided to two or three parts by '.'. The left is table name, the right one
# is View or Edit, and the middle or right one is column name. The column name may represent
# a group of actual column names
role1.restricted.column1=NONE
role2.restricted.column1=NONE
role3.restricted.column1=Cardholder.Salary
role4.restricted.column1=Cardholder.Salary.View
role4.restricted.column2=Cardholder.Salary.Edit
role4.restricted.column3=Cardholder.DateOfBirth
role4.restricted.column4=Cardholder.MotherMaidenName

role5.restricted.column1=NONE


# Defining refresh interval for UserProfile. This field set the interval for UserProfile to be forcefully refreshed
# If this field is 0, the value will be default to 12 hours (3600000 * 12)
# refreshInterval=1800000
refreshInterval=0