Adding authorization intent to a given method to restrict execution to users that have a given role

git-svn-id: http://svn.us.apache.org/repos/asf/tuscany@777312 13f79535-47bb-0310-9956-ffa450edef68

2 files changed, 30 insertions, 2 deletions

diff --git a/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/definitions.xml b/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/definitions.xml
index 0a039338bc..119bb44151 100644
--- a/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/definitions.xml
+++ b/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/definitions.xml
@@ -55,5 +55,13 @@
             <tuscany:realmConfigurationName>ldap-realm</tuscany:realmConfigurationName>
         </tuscany:ldapRealmAuthentication>
     </policySet>
-  
+
+
+   <policySet xmlns="http://www.osoa.org/xmlns/sca/1.0"
+               name="allowManager"
+               provides="sca:authorization" 
+               appliesTo="sca:implementation.java">
+       <allow roles="manager"/>
+    </policySet>  
+    
  </sca:definitions>
\ No newline at end of file
diff --git a/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/store.composite b/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/store.composite
index d2a90946db..def6330fc4 100644
--- a/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/store.composite
+++ b/sandbox/lresende/sca/samples/store-secure-webapp/src/main/resources/store.composite
@@ -1,4 +1,22 @@
 <?xml version="1.0" encoding="UTF-8"?>
+<!--
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ * 
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.    
+-->
 <composite xmlns="http://www.osoa.org/xmlns/sca/1.0"
 	xmlns:tuscany="http://tuscany.apache.org/xmlns/sca/1.0"
 	xmlns:s="http://store" 
@@ -6,7 +24,9 @@
 	name="store">
 		
 	<component name="Catalog">
-		<implementation.java class="services.FruitsCatalogImpl"/>
+		<implementation.java class="services.FruitsCatalogImpl">
+		    <operation name="get" requires="authorization"  /> <!-- policySets="allowManager" -->
+		</implementation.java> 
 		<property name="currencyCode">USD</property>
 		<service name="Catalog">
             <operation name="get" requires="authentication"/>