Samples > Sample: Access control policies for development purposes

Sample: Command-level access control policy for new controller commands

Controller commands require access control policies in order to meet the requirements of the access control framework. If you create a new controller command, the name of the command's interface is specified as a resource. The following XML snip can be modified for the new command and loaded using the acpload command:

<?xml version="1.0" encoding="ISO-8859-1" standalone="no" ?> 
<!DOCTYPE Policies SYSTEM "../dtd/accesscontrolpolicies.dtd"> 
<Policies> 

<Action Name="ExecuteCommand"
   CommandName="Execute"> 
</Action> 

<ResourceCategory Name="com.yourcompany.yourpackage.commands.YourControllerCmdResourceCategory"
        ResourceBeanClass="com.yourcompany.yourpackage.commands.YourControllerCmd"> 
       
<ResourceAction Name="ExecuteCommand"/> 
</ResourceCategory>         

<ResourceGroup Name="AllSiteUserCmdResourceGroup" OwnerID="RootOrganization">        
<ResourceGroupResource Name="com.yourcompany.yourpackage.commands.YourControllerCmdResourceCategory" /> 
</ResourceGroup> 
</Policies>

Where:

com.yourcompany.yourpackage.commands

represents the packaging structure

YourControllerCmd

represents the name of the new controller command

As an example, the following XML file is used to load the access control policy for a new controller command that is created in a tutorial contained in this book.

<?xml version="1.0" encoding="ISO-8859-1" standalone="no" ?> 
<!DOCTYPE Policies SYSTEM "../dtd/accesscontrolpolicies.dtd"> 
<Policies>        
<Action Name="ExecuteCommand" CommandName="Execute">        
</Action> 
       
<ResourceCategory Name="com.ibm.commerce.sample.commands.MyNewControllerCmdResourceCategory"
                ResourceBeanClass="com.ibm.commerce.sample.commands.MyNewControllerCmd">                
<ResourceAction Name="ExecuteCommand"/>        
</ResourceCategory>         
       
<ResourceGroup Name="AllSiteUserCmdResourceGroup" OwnerID="RootOrganization">                
<ResourceGroupResource Name="com.ibm.commerce.sample.commands.MyNewControllerCmdResourceCategory" />        
</ResourceGroup>
</Policies>

Related concepts

Understand access control

Related tasks

Implement access control

Create an access control policy

Define access control policy elements using XML

Related reference

Sample: Access control policies for development purposes

+

Search Tips   |   Advanced Search