Role-based Security
From DBSight Full-Text Search Engine/Platform Wiki
[edit]
request.getUserPrincipal()
By default, DBSight can check whether the request has the request.getUserPrincipal(), and bind it to a filter query.
[edit]
Customized Role Based
The problem: Is it possible to use a role based security as a filter in the dbsight engine?
Example user is in roles a,b,c Data is allowed to be seen by (b,c) -> user has those roles, ok. Data is allowed to be seen by (d) -> user has not those roles, not ok.
From user jkoek:
I got it working without a proxy only used a filter and the wrapper. The user is allowed to use the q parameter and i'm sending it back to the user in my template. So adding the fields would temper the input of the user. However the lq field is also available. In my wrapper I'm filling that parameter with the roles allowed. If the user enters data on that field it is ignored.
