How to change user authorities programmatically?

Question

Greetings all i am using spring security 3.0.2 and i want after login to get user authorities and add another role to him so he can access some page that requires the new role how to do so ?

score 2 · Accepted Answer · edited May 23 '17 at 12:34

2

i played around with the method in here:

User Granted Authorities are always : ROLE_ANONYMOUS?

and it did the trick.

edited May 23 '17 at 12:34

Community

1
1

answered Dec 13 '10 at 08:27

Mahmoud Saleh

32,503
116
326
490

Could you please explain what you actually did to the method there? – Sunmit Girme Feb 05 '14 at 13:13

score 0 · Answer 2 · edited May 23 '17 at 10:28

0

You have to create your authentication provider loading the authorities data from a database. In this stackoverflow question you can see the way to do it. Whenever you need to change the user authorities you'll only have to change the data in the database.

edited May 23 '17 at 10:28

Community

1
1

answered Dec 06 '10 at 15:58

Javi

18,567
30
99
132

score 0 · Answer 3 · answered Dec 09 '10 at 10:07

@Javi: I didn't know how to comment on your answer, so i had to create a new one.

The problem of your solution would be that the user has to logout and re-login to get the new role. I think what sword101 is trying to accomplish is to dynamically add a new role to a user without needing to re-login.

This is however an issue I'm looking into aswell and didn't find a suitable solution so far.

I tried to implement it with a flag within my (custom) UserDetails object. This flag is read by the voter and voted accordingly. But this didn't really work out as intended. But I'll may look into that again to see what went wrong.

How to change user authorities programmatically?

3 Answers3