JavaMelody does not work with SecurityFilters.groovy about grails-melody-plugin HOT 4 CLOSED

First, if you use spring security, then adding just the following in Config.groovy is supposed to work:

grails.plugins.springsecurity.interceptUrlMap = [
                '/monitoring/**': ['ROLE_ADMIN'],
]

Otherwise, you should note that the "monitoring" url of melody is not a controller, it's a filter. So I don't think that the following would work: monitoringController(controller:'monitoring', action:'*')

And I don't know how to make it work in SecurityFilters.groovy

from grails-melody-plugin.

Sadly, I'm not using Spring Security, my app has no need for it. Standard filters, with the exception of Melody, suited all of my needs (and my security design doesn't lend itself to SpringSecurity).

from grails-melody-plugin.

Grails filters are intended to use only when you have a controller and action, so it not works with url's that a filter responds (like Melody). To accomplish that you will need to write a plain Java filter that runs before the Melody filter.

Here's an example of Servlet filter in Grails.

from grails-melody-plugin.

@kdorff I'm closing this, since the security depends on your implementation, and there's no way to do it with a Grails filter, since monitoring is not a controller.

P.S: off-topic, but I suggest you to take a look at the security plugins available in Grails. They are well tested and should provide a more standard approach to your projects.

from grails-melody-plugin.