{"action":"created","comment":{"url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/comments/65133179","id":65133179,"diff_hunk":"@@ -0,0 +1,59 @@\n+# Authorization Policy Storage\n+\n+The authorization policy file is stored in a file called _WEB-INF/classes/security-policy.properties_ stored under the application's WAR structure.\n+\n+Here is an example of a security policy:\n+\n+```\n+# Role \"admin\"\n+role.admin.home=Home\n+role.admin.priority=1\n+role.admin.permission.perspective.read=true\n+role.admin.permission.perspective.read.Dashboard=false\n+\n+# Role \"user\"\n+role.user.home=Dashboard\n+role.user.priority=0\n+role.user.permission.perspective.read=false\n+role.user.permission.perspective.read.Home=true\n+role.user.permission.perspective.read.Dashboard=true\n+```\n+\n+Permissions, home perspectives and role priorities are all defined in the same file. In some cases though, it might be appropriate to split the policy into several files, basically for two main reasons:\n+\n+* Separation of concerns\n+* Maintainability\n+\n+The main policy can be split into several `security-module` files each of them contaning a subset of the entries. For example:\n+\n+_security-policy.properties_:\n+```\n+# Security policy marker file.\n+#\n+# All the files starting with the \"security-module\" prefix will be loaded and\n+# included as part of the global authorization policy.\n+#\n+```\n+_security-module-homes.properties_:\n+```\n+role.admin.home=Home\n+role.user.home=Dashboard\n+```\n+_security-module-priorities.properties_:\n+```\n+role.admin.priority=1\n+role.user.priority=0\n+```\n+_security-module-perspectives.properties_:\n+```\n+role.admin.permission.perspective.read=true\n+role.admin.permission.perspective.read.Dashboard=false\n+role.user.permission.perspective.read=false\n+role.user.permission.perspective.read.Home=true\n+role.user.permission.perspective.read.Dashboard=true\n+```\n+\n+Notice, despite using the split approach, the _security-policy.properties_ must always be present as it is used as a marker file by the security subsystem in order to locate the other policy files.\n+\n+This split mechanism allows for a better organization of the whole security policy. Use it at your best convenience.","path":"docs/security/authzPolicyStorage.md","position":58,"original_position":58,"commit_id":"c36ba0f232671a599671574a458bd703c72d285e","original_commit_id":"c36ba0f232671a599671574a458bd703c72d285e","user":{"login":"jhrcek","id":2716069,"avatar_url":"https://avatars.githubusercontent.com/u/2716069?v=3","gravatar_id":"","url":"https://api.github.com/users/jhrcek","html_url":"https://github.com/jhrcek","followers_url":"https://api.github.com/users/jhrcek/followers","following_url":"https://api.github.com/users/jhrcek/following{/other_user}","gists_url":"https://api.github.com/users/jhrcek/gists{/gist_id}","starred_url":"https://api.github.com/users/jhrcek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhrcek/subscriptions","organizations_url":"https://api.github.com/users/jhrcek/orgs","repos_url":"https://api.github.com/users/jhrcek/repos","events_url":"https://api.github.com/users/jhrcek/events{/privacy}","received_events_url":"https://api.github.com/users/jhrcek/received_events","type":"User","site_admin":false},"body":"Missing some information about naming rules these configuration files must obey. Does each of them have to have \"security-\" prefix and \".properties\" extension?","created_at":"2016-05-31T07:21:26Z","updated_at":"2016-05-31T07:21:26Z","html_url":"https://github.com/uberfire/uberfire-docs/pull/15#discussion_r65133179","pull_request_url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15","_links":{"self":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/comments/65133179"},"html":{"href":"https://github.com/uberfire/uberfire-docs/pull/15#discussion_r65133179"},"pull_request":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15"}}},"pull_request":{"url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15","id":66172165,"html_url":"https://github.com/uberfire/uberfire-docs/pull/15","diff_url":"https://github.com/uberfire/uberfire-docs/pull/15.diff","patch_url":"https://github.com/uberfire/uberfire-docs/pull/15.patch","issue_url":"https://api.github.com/repos/uberfire/uberfire-docs/issues/15","number":15,"state":"open","locked":false,"title":"UF-280: Security documentation","user":{"login":"dgutierr","id":2429839,"avatar_url":"https://avatars.githubusercontent.com/u/2429839?v=3","gravatar_id":"","url":"https://api.github.com/users/dgutierr","html_url":"https://github.com/dgutierr","followers_url":"https://api.github.com/users/dgutierr/followers","following_url":"https://api.github.com/users/dgutierr/following{/other_user}","gists_url":"https://api.github.com/users/dgutierr/gists{/gist_id}","starred_url":"https://api.github.com/users/dgutierr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dgutierr/subscriptions","organizations_url":"https://api.github.com/users/dgutierr/orgs","repos_url":"https://api.github.com/users/dgutierr/repos","events_url":"https://api.github.com/users/dgutierr/events{/privacy}","received_events_url":"https://api.github.com/users/dgutierr/received_events","type":"User","site_admin":false},"body":"Documentation around the UF security API.\r\n\r\nThis PR depends on https://github.com/uberfire/uberfire-tutorial/pull/8","created_at":"2016-04-12T14:56:07Z","updated_at":"2016-05-31T07:21:26Z","closed_at":null,"merged_at":null,"merge_commit_sha":"5de53b09b8c21fc21435f3068f3aeacbb4f78025","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15/commits","review_comments_url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15/comments","review_comment_url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/uberfire/uberfire-docs/issues/15/comments","statuses_url":"https://api.github.com/repos/uberfire/uberfire-docs/statuses/c36ba0f232671a599671574a458bd703c72d285e","head":{"label":"dgutierr:UF-280","ref":"UF-280","sha":"c36ba0f232671a599671574a458bd703c72d285e","user":{"login":"dgutierr","id":2429839,"avatar_url":"https://avatars.githubusercontent.com/u/2429839?v=3","gravatar_id":"","url":"https://api.github.com/users/dgutierr","html_url":"https://github.com/dgutierr","followers_url":"https://api.github.com/users/dgutierr/followers","following_url":"https://api.github.com/users/dgutierr/following{/other_user}","gists_url":"https://api.github.com/users/dgutierr/gists{/gist_id}","starred_url":"https://api.github.com/users/dgutierr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dgutierr/subscriptions","organizations_url":"https://api.github.com/users/dgutierr/orgs","repos_url":"https://api.github.com/users/dgutierr/repos","events_url":"https://api.github.com/users/dgutierr/events{/privacy}","received_events_url":"https://api.github.com/users/dgutierr/received_events","type":"User","site_admin":false},"repo":{"id":53972106,"name":"uberfire-docs","full_name":"dgutierr/uberfire-docs","owner":{"login":"dgutierr","id":2429839,"avatar_url":"https://avatars.githubusercontent.com/u/2429839?v=3","gravatar_id":"","url":"https://api.github.com/users/dgutierr","html_url":"https://github.com/dgutierr","followers_url":"https://api.github.com/users/dgutierr/followers","following_url":"https://api.github.com/users/dgutierr/following{/other_user}","gists_url":"https://api.github.com/users/dgutierr/gists{/gist_id}","starred_url":"https://api.github.com/users/dgutierr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dgutierr/subscriptions","organizations_url":"https://api.github.com/users/dgutierr/orgs","repos_url":"https://api.github.com/users/dgutierr/repos","events_url":"https://api.github.com/users/dgutierr/events{/privacy}","received_events_url":"https://api.github.com/users/dgutierr/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/dgutierr/uberfire-docs","description":"","fork":true,"url":"https://api.github.com/repos/dgutierr/uberfire-docs","forks_url":"https://api.github.com/repos/dgutierr/uberfire-docs/forks","keys_url":"https://api.github.com/repos/dgutierr/uberfire-docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/dgutierr/uberfire-docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/dgutierr/uberfire-docs/teams","hooks_url":"https://api.github.com/repos/dgutierr/uberfire-docs/hooks","issue_events_url":"https://api.github.com/repos/dgutierr/uberfire-docs/issues/events{/number}","events_url":"https://api.github.com/repos/dgutierr/uberfire-docs/events","assignees_url":"https://api.github.com/repos/dgutierr/uberfire-docs/assignees{/user}","branches_url":"https://api.github.com/repos/dgutierr/uberfire-docs/branches{/branch}","tags_url":"https://api.github.com/repos/dgutierr/uberfire-docs/tags","blobs_url":"https://api.github.com/repos/dgutierr/uberfire-docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/dgutierr/uberfire-docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/dgutierr/uberfire-docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/dgutierr/uberfire-docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/dgutierr/uberfire-docs/statuses/{sha}","languages_url":"https://api.github.com/repos/dgutierr/uberfire-docs/languages","stargazers_url":"https://api.github.com/repos/dgutierr/uberfire-docs/stargazers","contributors_url":"https://api.github.com/repos/dgutierr/uberfire-docs/contributors","subscribers_url":"https://api.github.com/repos/dgutierr/uberfire-docs/subscribers","subscription_url":"https://api.github.com/repos/dgutierr/uberfire-docs/subscription","commits_url":"https://api.github.com/repos/dgutierr/uberfire-docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/dgutierr/uberfire-docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/dgutierr/uberfire-docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/dgutierr/uberfire-docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/dgutierr/uberfire-docs/contents/{+path}","compare_url":"https://api.github.com/repos/dgutierr/uberfire-docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/dgutierr/uberfire-docs/merges","archive_url":"https://api.github.com/repos/dgutierr/uberfire-docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/dgutierr/uberfire-docs/downloads","issues_url":"https://api.github.com/repos/dgutierr/uberfire-docs/issues{/number}","pulls_url":"https://api.github.com/repos/dgutierr/uberfire-docs/pulls{/number}","milestones_url":"https://api.github.com/repos/dgutierr/uberfire-docs/milestones{/number}","notifications_url":"https://api.github.com/repos/dgutierr/uberfire-docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/dgutierr/uberfire-docs/labels{/name}","releases_url":"https://api.github.com/repos/dgutierr/uberfire-docs/releases{/id}","deployments_url":"https://api.github.com/repos/dgutierr/uberfire-docs/deployments","created_at":"2016-03-15T19:22:17Z","updated_at":"2016-03-15T19:22:18Z","pushed_at":"2016-04-12T14:53:16Z","git_url":"git://github.com/dgutierr/uberfire-docs.git","ssh_url":"git@github.com:dgutierr/uberfire-docs.git","clone_url":"https://github.com/dgutierr/uberfire-docs.git","svn_url":"https://github.com/dgutierr/uberfire-docs","homepage":null,"size":15445,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"uberfire:master","ref":"master","sha":"cf79f65ca004571177e9efef52879bb7233c7f80","user":{"login":"uberfire","id":5167699,"avatar_url":"https://avatars.githubusercontent.com/u/5167699?v=3","gravatar_id":"","url":"https://api.github.com/users/uberfire","html_url":"https://github.com/uberfire","followers_url":"https://api.github.com/users/uberfire/followers","following_url":"https://api.github.com/users/uberfire/following{/other_user}","gists_url":"https://api.github.com/users/uberfire/gists{/gist_id}","starred_url":"https://api.github.com/users/uberfire/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uberfire/subscriptions","organizations_url":"https://api.github.com/users/uberfire/orgs","repos_url":"https://api.github.com/users/uberfire/repos","events_url":"https://api.github.com/users/uberfire/events{/privacy}","received_events_url":"https://api.github.com/users/uberfire/received_events","type":"Organization","site_admin":false},"repo":{"id":29028887,"name":"uberfire-docs","full_name":"uberfire/uberfire-docs","owner":{"login":"uberfire","id":5167699,"avatar_url":"https://avatars.githubusercontent.com/u/5167699?v=3","gravatar_id":"","url":"https://api.github.com/users/uberfire","html_url":"https://github.com/uberfire","followers_url":"https://api.github.com/users/uberfire/followers","following_url":"https://api.github.com/users/uberfire/following{/other_user}","gists_url":"https://api.github.com/users/uberfire/gists{/gist_id}","starred_url":"https://api.github.com/users/uberfire/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uberfire/subscriptions","organizations_url":"https://api.github.com/users/uberfire/orgs","repos_url":"https://api.github.com/users/uberfire/repos","events_url":"https://api.github.com/users/uberfire/events{/privacy}","received_events_url":"https://api.github.com/users/uberfire/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/uberfire/uberfire-docs","description":"","fork":false,"url":"https://api.github.com/repos/uberfire/uberfire-docs","forks_url":"https://api.github.com/repos/uberfire/uberfire-docs/forks","keys_url":"https://api.github.com/repos/uberfire/uberfire-docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/uberfire/uberfire-docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/uberfire/uberfire-docs/teams","hooks_url":"https://api.github.com/repos/uberfire/uberfire-docs/hooks","issue_events_url":"https://api.github.com/repos/uberfire/uberfire-docs/issues/events{/number}","events_url":"https://api.github.com/repos/uberfire/uberfire-docs/events","assignees_url":"https://api.github.com/repos/uberfire/uberfire-docs/assignees{/user}","branches_url":"https://api.github.com/repos/uberfire/uberfire-docs/branches{/branch}","tags_url":"https://api.github.com/repos/uberfire/uberfire-docs/tags","blobs_url":"https://api.github.com/repos/uberfire/uberfire-docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/uberfire/uberfire-docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/uberfire/uberfire-docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/uberfire/uberfire-docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/uberfire/uberfire-docs/statuses/{sha}","languages_url":"https://api.github.com/repos/uberfire/uberfire-docs/languages","stargazers_url":"https://api.github.com/repos/uberfire/uberfire-docs/stargazers","contributors_url":"https://api.github.com/repos/uberfire/uberfire-docs/contributors","subscribers_url":"https://api.github.com/repos/uberfire/uberfire-docs/subscribers","subscription_url":"https://api.github.com/repos/uberfire/uberfire-docs/subscription","commits_url":"https://api.github.com/repos/uberfire/uberfire-docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/uberfire/uberfire-docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/uberfire/uberfire-docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/uberfire/uberfire-docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/uberfire/uberfire-docs/contents/{+path}","compare_url":"https://api.github.com/repos/uberfire/uberfire-docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/uberfire/uberfire-docs/merges","archive_url":"https://api.github.com/repos/uberfire/uberfire-docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/uberfire/uberfire-docs/downloads","issues_url":"https://api.github.com/repos/uberfire/uberfire-docs/issues{/number}","pulls_url":"https://api.github.com/repos/uberfire/uberfire-docs/pulls{/number}","milestones_url":"https://api.github.com/repos/uberfire/uberfire-docs/milestones{/number}","notifications_url":"https://api.github.com/repos/uberfire/uberfire-docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/uberfire/uberfire-docs/labels{/name}","releases_url":"https://api.github.com/repos/uberfire/uberfire-docs/releases{/id}","deployments_url":"https://api.github.com/repos/uberfire/uberfire-docs/deployments","created_at":"2015-01-09T18:13:26Z","updated_at":"2016-03-11T14:44:13Z","pushed_at":"2016-05-18T14:37:51Z","git_url":"git://github.com/uberfire/uberfire-docs.git","ssh_url":"git@github.com:uberfire/uberfire-docs.git","clone_url":"https://github.com/uberfire/uberfire-docs.git","svn_url":"https://github.com/uberfire/uberfire-docs","homepage":null,"size":15607,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":12,"mirror_url":null,"open_issues_count":2,"forks":12,"open_issues":2,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15"},"html":{"href":"https://github.com/uberfire/uberfire-docs/pull/15"},"issue":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/issues/15"},"comments":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/issues/15/comments"},"review_comments":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15/comments"},"review_comment":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/pulls/15/commits"},"statuses":{"href":"https://api.github.com/repos/uberfire/uberfire-docs/statuses/c36ba0f232671a599671574a458bd703c72d285e"}}}}
{"actor":{"display_login":"jhrcek"}}