Spring security with database and multiple roles?

Question

I'm trying to make an application using spring 3.0. Now I've decided to try my hand at spring-security and hibernate. I've already seen that it's possible to back it with a databasem and I've seen a reference to defining your own queries?

Now the problem I have is that the tutorials I've been finding aren't too clear and that they assume that a user can only have one role. I want to give some users multiple roles.

So I was thinking about a database scheme along the lines of:

User:

user_id
username
password
registrationDate

User_Role:

user_id
role_id

Role:

role_id
rolename

Now I was wondering if anyone had some pointers to some usefull tutorials/advice/comments.

Community · Accepted Answer · 2017-05-23 12:30:46Z

8

You need to implement your own UserDetails (supports multiple roles for each user). This custom UserDetails implementation is then returned by your own UserDetailsService implementation that's injected on your daoAuthenticationProvider.

See also my answer @ Spring Security 3 database authentication with Hibernate for a complete example.

edited May 23, 2017 at 12:30

CommunityBot

11 silver badge

answered Apr 25, 2010 at 19:21

Kdeveloper

13.8k11 gold badges44 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Cracker Over a year ago

I understood the authentication part from database. But how do we assign the roles from the database? Can you answer my question: stackoverflow.com/questions/6893061/…

Gandalf · Accepted Answer · 2010-04-26 16:03:54Z

0

Something like this:

public class CustomUserService implements UserDetailsService {

   private UserDao userDao;

   public CustomUserService(UserDao u) {
      userDao = u;
   }

   public UserDetails loadUserByUsername(String username) {
      CustomUser user = userDao.getUser(username);
      if (user == null)
         throw new UserNotFoundException("User "+username+" does not exist");
      return user;
   }
}

And your UserDao implementation is a simple DAO that can easily use hibernate annotations and assign multple roles to your CustomUser object. Pretty basic.

answered Apr 26, 2010 at 16:03

Gandalf

9,9178 gold badges58 silver badges91 bronze badges

Collectives™ on Stack Overflow

Spring security with database and multiple roles?

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related