Sample: Command-level access control policy for new controller commands

Sample: Command-level access control policy for new controller commands

Controller commands require access control policies in order to meet the requirements of the access control framework. If we create a new controller command, the name of the command's interface is specified as a resource. The following XML snip can be modified for our new command and loaded using the acpload command:
<?xml version="1.0" encoding="ISO-8859-1" standalone="no" ?> 
<!DOCTYPE Policies SYSTEM "../dtd/accesscontrolpolicies.dtd">

<Policies>

 <Action Name="ExecuteCommand"
   CommandName="Execute">
 </Action>

 <ResourceCategory Name="com.yourcompany.yourpackage.commands. YourControllerCmdResourceCategory"
        ResourceBeanClass="com.yourcompany.yourpackage.commands. YourControllerCmd">

        <ResourceAction Name="ExecuteCommand"/>
 </ResourceCategory>
        
 <ResourceGroup Name="AllSiteUserCmdResourceGroup" OwnerID="RootOrganization">
        <ResourceGroupResource Name="com.yourcompany.yourpackage.commands. YourControllerCmdResourceCategory" />
 </ResourceGroup>

</Policies>
Where:

com.yourcompany.yourpackage.commands

represents your packaging structure

YourControllerCmd

represents the name of your new controller command

As an example, the following XML file is used to load the access control policy for a new controller command that is created in a tutorial contained in this book.
<?xml version="1.0" encoding="ISO-8859-1" standalone="no" ?> 
<!DOCTYPE Policies SYSTEM "../dtd/accesscontrolpolicies.dtd">

<Policies>
        <Action Name="ExecuteCommand" CommandName="Execute">
        </Action>

        <ResourceCategory Name="com.ibm.commerce.sample.commands.MyNewControllerCmdResourceCategory"
                ResourceBeanClass="com.ibm.commerce.sample.commands.MyNewControllerCmd">
                <ResourceAction Name="ExecuteCommand"/>
        </ResourceCategory>
        
        <ResourceGroup Name="AllSiteUserCmdResourceGroup" OwnerID="RootOrganization">
                <ResourceGroupResource Name="com.ibm.commerce.sample.commands.MyNewControllerCmdResourceCategory" />
        </ResourceGroup>
</Policies>
Related concepts
Understanding access control

Related tasks
Implementing access control
Creating an access control policy
Defining access control policy elements using XML

Related reference
Sample: Access control policies for development purposes