Tag Archives: spring

Domain modeling with Spring Data Neo4j

Hi all, Willie here. Last time I told you that I’m building the Skybase CMDB using Neo4j and Spring Data Neo4j, and I was excited to get a lot of positive feedback about that. I showed a little code but … Continue reading

Posted in Chapter 02 - Data, Chapter 11 - CMDB, Tutorials | Tagged , , , | 2 Comments

Configuring Jackson to use JAXB2 annotations with Spring

If you want to generate both XML and JSON views of some object, one option is to use JAXB2 annotations for the XML mapping and Jackson annotations for the JSON mapping. But that’s a little bit of a nuisance, because … Continue reading

Posted in Chapter 11 - CMDB, Quick Tips | Tagged , , , , , , , | 1 Comment

Why I’m pretty excited about using Neo4j for a CMDB backend

Skybase is my first open source configuration management database (CMDB) effort, but it’s not the first time I’ve built a CMDB. At work a bunch of us built–and continue to build–a proprietary, internal system CMDB called deathBURRITO as part of … Continue reading

Posted in Architecture, Chapter 11 - CMDB | Tagged , , | 8 Comments

Quick tip: Spring Security role-based authorization and permissions

The problem: hardcoded role-based authorization One of the challenges around using Spring Security is that the examples—both in the documentation and on the web—tend to promote an overly-simple approach to role-based authorization, hardcoding roles in the source in a non-configurable … Continue reading

Posted in Chapter 07 - Authorization, Quick Tips | Tagged , , , , | 13 Comments

Quick tip: avoid rule duplication when using security:authorize

Spring Security features a tag that allows us to show or hide JSP content based on access rules we can define. Here’s an example: <security:authorize access=”hasRole(‘admin’)”> <a href=”/main/admin.html”>Admin</a> <security:authorize> This is probably the most common way to use the tag. … Continue reading

Posted in Chapter 07 - Authorization, Quick Tips | Tagged , , | Leave a comment

Spring Security 3 DZone Refcard and interview

My Spring Security 3 Refcard is out. It covers expression-based authorization in Spring Security 3. There is also a supporting interview about the Refcard. The interview goes into more depth about some security principles like whitelisting and data-driven security, and … Continue reading

Posted in Chapter 07 - Authorization, News | Tagged , , , , , , | Leave a comment

Annotation-based circuit breakers with Spring

The punch line First, here’s the punch line for readers who already know what a circuit breaker is: @Service @Transactional( propagation = Propagation.REQUIRED, isolation = Isolation.DEFAULT, readOnly = true) public class MessageServiceImpl implements MessageService { @Inject private MessageDao messageDao; @GuardedByCircuitBreaker(“messageServiceBreaker”) … Continue reading

Posted in Chapter 14 - Site-up, Tutorials | Tagged , , , | 5 Comments

Spring Security 3 database schemas for MySQL

In preparation for a DZone Refcard on Spring Security 3 I’m doing, here are the Spring Security database schemas for MySQL. This isn’t intended to be an exhaustive treatment. Rather it’s more a reference for the MySQL dialect version of … Continue reading

Posted in Chapter 06 - Authentication, Chapter 07 - Authorization, Reference | Tagged , , , , | 7 Comments

New stuff in Spring 3.0, part 2

[Here's part 1 if you missed it.] As promised, here’s the rest of my notes dump on what’s new in Spring 3.0, or really Spring 3.x since a lot of what comes in Spring 3.x is waiting on JEE 6, … Continue reading

Posted in News | Tagged , , , , | 2 Comments

Some thoughts on the new SpringSource maintenance policy

At the risk of getting myself involved in a highly charged political issue, I have some thoughts about the new SpringSource maintenance policy that I wanted to share. Not sure that I know what I’m talking about, but I have … Continue reading

Posted in Random Thoughts | Tagged , , | 2 Comments