cbSecurity Model
This object is used to provide you with human, fluent and explicit security authorizations, authentication insight, utility and contexts.
Explicit Authorizations
The cbSecurity
model is a specialized service that will allow you to do explicit authorizations in any layer of your ColdBox application.
Sometimes, you will need authorization checks outside of the incoming request rules or the handler annotations. This can be from within interceptors, models, layouts, or views. For this, we have provided the cbSecurity
model so you can do explicit authorization checks anywhere you like.
cbSecurity
Model
cbSecurity
ModelYou can inject our model, or you can use our handy cbsecure()
mixin (handlers/layouts/views) and then call the appropriate security functions:
All security methods will call the application's configured Authentication Service to retrieve the currently logged-in user. If the user is not logged in, an immediate NoUserLoggedIn
exception will be thrown by all methods.
You can now discover our sections for securing using cbSecurity
Last updated