Changeset 73 for branches/TaskRewrite/src/grails-app/conf/SecurityConfig.groovy

Timestamp:

Mar 14, 2009, 10:04:39 AM (16 years ago)

Author:

gav

Message:

Add changePassword under options view so that users can change their own password.
Adjust for password validation, userCache etc. Only a small bug during "edit" is left on second "update" command.

File:

• branches/TaskRewrite/src/grails-app/conf/SecurityConfig.groovy (modified) (1 diff)

branches/TaskRewrite/src/grails-app/conf/SecurityConfig.groovy

@@ -46 +46 @@
     alwaysUseDefaultTargetUrl = true
 
+    //User caching, turned this off so that password changes take effect.
+    //It would appear that user is still in the session as logout/login
+    // is still required for role changes to take effect.
+    //If this option causes high database load try:
+    //  import org.acegisecurity.providers.dao.DaoAuthenticationProvider
+    //  import org.acegisecurity.context.SecurityContextHolder
+    //  DaoAuthenticationProvider daoAuthenticationProvider 
+    //  def user = SecurityContextHolder.context.authentication.principal.username 
+    //  daoAuthenticationProvider.userCache.removeUserFromCache(user)
+    //  in logout controller and perhaps on password change and role change.
+    cacheUsers = false
+
 }