seam登录时的权限验证

    声明：这里是没用到seam的JPA的高级权限验证的。是普通的权限验证。高级的验证在我的博客里面也有说明！

普通验证：
    数据库表：一个users表、一个permission表，role表没有。
 但是users表中有role这个字段，也就是说一个user对应一个role。一个role可以对应多个user。
 一个user对应有多个permission。

高级的JPA的验证：
    数据库表：一个users表、一个role表、一个permission表。
其它的就不用多说了。
    

 

在登录验证的时候的代码：

package cn.ctit.cms.session;

import static org.jboss.seam.ScopeType.SESSION;

import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.List;

import javax.ejb.Stateless;
import javax.persistence.EntityManager;
import javax.persistence.PersistenceContext;

import org.drools.WorkingMemory;
import org.jboss.seam.annotations.In;
import org.jboss.seam.annotations.Name;
import org.jboss.seam.annotations.Observer;
import org.jboss.seam.annotations.Out;
import org.jboss.seam.faces.FacesMessages;
import org.jboss.seam.security.Credentials;
import org.jboss.seam.security.Identity;
import org.jboss.seam.security.permission.RuleBasedPermissionResolver;

import cn.ctit.cms.entity.Users;

@Stateless
@Name("authenticator")
public class AuthenticatorAction implements Authenticator 
{
    @In Identity identity;
    @In Credentials credentials;
    
    @In 
    RuleBasedPermissionResolver ruleBasedPermissionResolver;
    
    @PersistenceContext
    private EntityManager em;
    
    @Out(required=false, scope = SESSION)
    private Users user2;
   
    private short rolecount;
        
    @SuppressWarnings("unchecked")
    @Observer("org.jboss.seam.security.loginSuccessful")
     public void addrolepermission(){
    	    identity.addRole(String.valueOf(user2.getRole()));
    	    WorkingMemory wm = ruleBasedPermissionResolver.getSecurityContext();   
    	    for(Permission p:user2.getPermissionList()){ 
    		wm.insert(p);
    	    }	
      }
    
    
    @SuppressWarnings("unchecked")
    public boolean authenticate()
    {
    	try{
    		List results = em.createQuery("select u from Users u where u.username=:usern and u.password=:pass")
    						.setParameter("usern", credentials.getUsername())
    						.setParameter("pass", EncoderByMd5(credentials.getPassword()))
							.getResultList();
    		if(results.size() == 0){
        		FacesMessages.instance().addToControl("wrongmessage", "user name or password is not available !");
        		return false;
        	}else{
        		user2 = (Users) results.get(0);
        		if(user2.getEnable()!=null && user2.getEnable()){
        			return true;
        		}else{
        			FacesMessages.instance().addToControl("wrongmessage", "user is inactive !");
        			return false;
        		}
        	}
    	}catch (Exception ex){
    		ex.printStackTrace();
    		return false;
    	}
    	
    	
    }
        
}