Page History

...

1. Enable this provider by setting the configuration property fcrepo.auth.principal.roles.enabled to true.
2. Set the fcrepo.auth.principal.roles.list to a comma separated list of roles
3. Update your web.xml auth-constraint element to contain your custom roles

...

HttpHeaderPrincipalProvider is a Principal Provider that obtains its initial set of principals from HTTP header requests.

1. Enable this provider by setting the configuration property fcrepo.auth.principal.header.enabled to true.
2. Set fcrepo.auth.principal.header.name to the name of the header that contains the principals
3. Set fcrepo.auth.principal.header.separator to the character that is used to separate multiple principals in the header

For example, your fcrepo.properties file might look like this:

fcrepo.auth.principal.header.enabled=true fcrepo.auth.principal.header.name=x-principal-header
fcrepo.auth.principal.header.separator=,<!-- Optional PrincipalProvider that will inspect the request header, "some-header", for user role values -->
<bean name="headerProvider" class="org.fcrepo.auth.common.HttpHeaderPrincipalProvider">
  <property name="headerName" value="some-header"/>
  <property name="separator" value=","/>
</bean>

Delegate Header Principal Provider

...