Authz Zul Tags

asked 2010-10-02 17:04:36 +0800

eptx
130 ● 3

I can secure small app sections using Java:

if(auth.isPermitted(action,resource)){
//secured code here
}

...and using jsp tags:

<auth:is-permitted action="GET" uri="#{contextPath}/navigation/manager">
<div class="toolbar">
<h2>#{messages['section.heading']}</h2>
</auth:is-permitted>

How may I leverage this pattern, in a declarative way, using zul?

As a component attribute:

<label value="@{model.secureMessage}" ispermitted="GET;${contextPath}/navigation/manager" />

Or as a wrapper component like jsp tag above:

<ispermitted action="GET" uri="${contextPath}/navigation/manager">
<div class="toolbar">
<h2>${messages['section.heading']}</h2>
</is-permitted>

Note that currently, ZK component data is sent to the client even if its "visible" attribute is "false". This is NOT acceptable for secure components.

Any guidance on implementing this zk is appreciated.