Security Exception while using Custom Entity Property Manager

Question

Hi,
I am using Portal 7.0 UUP example (specified in dev2dev.com site) to implement
custom entity property manager.
It all works fine using Portal 7.0 admin tool.
Now I am proving the same concept by writing java code to insert record in UUP_Example
table.
This is the code I am writing in my class
UserManager userManager = getUserManager(); (calling method to get Remote Interface
of UserManager).
ProfileWrapper pw = userManager.createUser(identifier,password,"User");
MyEntityPropertyManager myEntityPropertyManager=getMyEntityPropertyManager();(calling
method to get remote interface of MyEntityPropertyManager)
long num=myEntityPropertyManager.createUniqueId(null,identifier);
pw.setProperty("UUPExample","word1","mike_headen");
Code gets compiled successfully but when I execute these statements, following
run time exception occurs:
EJB Exception: ; nested exception is: java.lang.SecurityException: Users can only
be modified by themselves, or by a member of the role DelegatedAdminRole||SystemAdminRole.
This problem comes while executing last statement i.e
pw.setProperty("UUPExample","word1","ajay_dogra");
I know I am missing something here. Any guidance will be highly appreciated.
Thanks
Mike

Answer 1

Mike,
You approach is wrong and you have to code your program in a different way to
get rid of this problem.
Here, you are trying to update User property using pw.setProperty() even before
authenticating and logging in the user.
Why you are getting this error becuase user is not logged in and u are trying
to update the user property.
These are the steps you need to perform to update/insert user properties at the
time of login.
1. createUser(using usermanager.createUser).
2. Authenticate user(Authentication.login(identifier, password, req);
3. Initialse the profile in session
ProfileWrapper profile =
ProfileFactory.getProfile(identifier, null);
4. Fire UserRegistrationEvent and Session Login event.
5. Update user property using profilewrapper.setProperty.
Hope this helps,
You can either perform these steps in java or can use the usemanager custom tag
in ur JSP.
Thanks
Sanjay
Thanks
Sanjay
"Mike" <[email protected]> wrote:
>
Hi,
I am using Portal 7.0 UUP example (specified in dev2dev.com site) to
implement
custom entity property manager.
It all works fine using Portal 7.0 admin tool.
Now I am proving the same concept by writing java code to insert record
in UUP_Example
table.
This is the code I am writing in my class
UserManager userManager = getUserManager(); (calling method to get Remote
Interface
of UserManager).
ProfileWrapper pw = userManager.createUser(identifier,password,"User");
MyEntityPropertyManager myEntityPropertyManager=getMyEntityPropertyManager();(calling
method to get remote interface of MyEntityPropertyManager)
long num=myEntityPropertyManager.createUniqueId(null,identifier);
pw.setProperty("UUPExample","word1","mike_headen");
Code gets compiled successfully but when I execute these statements,
following
run time exception occurs:
EJB Exception: ; nested exception is: java.lang.SecurityException: Users
can only
be modified by themselves, or by a member of the role DelegatedAdminRole||SystemAdminRole.
This problem comes while executing last statement i.e
pw.setProperty("UUPExample","word1","ajay_dogra");
I know I am missing something here. Any guidance will be highly appreciated.
Thanks
Mike