Java WebApp Security frameworks

Question

I'm working on a implementation of a webapp in Java, where there will be limitations on some roles shall only be able to read data and some to update. All roles shall not have access to all pages.

I've looked at Apache Shiro together with JSP/Javascrip/CSS.

Are there any other alternatives for this? Or is this the best choice?

//Henrik

Andres · Accepted Answer · 2014-03-17 13:52:16Z

1

Consider Spring Security, formerly known as Acegi.

http://projects.spring.io/spring-security/

Seems it's a bit more mainstream:

http://www.indeed.com/jobtrends?q=Apache++Shiro%2C+Spring+Security&l=

answered Mar 17, 2014 at 13:52

Andres

10.7k4 gold badges50 silver badges65 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Hiny Over a year ago

It seems to contain all attributes needed, but is it portable for non-sping projects?

Andres Over a year ago

Yes. It works independently from the rest of the application.

Collectives™ on Stack Overflow

Java WebApp Security frameworks

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related