Assign and revoke Role to Session User dynamically

Question

Hello,

I need to assign and revoke Ivy Role dynamically on the session user. If I understand the API documentation well, the following method assigns the given role to the session, the role should be automatically unassigned after logout: Ivy.session().assignRole(role);

Here the API documentation:

@PublicAPI(value=EXPERT) Assigns a role to the session. Parameters:role The role to assign

The problem is that I need also to revoke an Ivy Role dynamically, I could not find a method like Ivy.session().revokeRole(IRole role) or Ivy.session().unassignRole(Irole role). Is there a possibility to do that?

Thanks a lot in advance.

Emmanuel

Accepted Answer

0	Hello Emmanuel, you could try ivy.session.getSessionUser().removeRole(ch.ivyteam.ivy.security.IRole) maybe this helps. best regards Roland link answered 31.03.2016 at 13:34 roland (suspended) accept rate: 41%

Accepted Answer

You can set the assigned role back to it's default value (and behaviour) by assigning the top level role called "everybody".

IRole everybody = Ivy.wf().getSecurityContext().getTopLevelRole();
theSession.assignRole(everybody);

Alternatively you can manage the roles on the session user as roland described:

IUser theUser = Ivy.wf().getSecurityContext().getCurrentSession().getSessionUser();
theUser.addRole(myRole);
theUser.removeRole(myRole);

Assign and revoke Role to Session User dynamically

Follow this question

Related questions