spring安全过滤器会阻止所有hibernate查询

时间:2013-09-16 18:30:03

标签: java spring hibernate spring-security sessionfactory

我有一个JSF,Spring,Hibernate和Spring安全的应用程序,hibernate层和数据库之间的交互很顺利,一旦Spring安全层查询没有呈现任何内容。

任何解决方案?

我正在从hibernate配置文件

创建SessionFactory

web.xml中的过滤器: ....................

!-- Spring Security -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>

    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

.................

hibernate会话工厂创建类:

..............................

package Util;

import org.hibernate.Session;
import org.hibernate.SessionFactory;
import org.hibernate.cfg.AnnotationConfiguration;
import org.hibernate.cfg.Configuration;
import org.hibernate.service.ServiceRegistry;
import org.hibernate.service.ServiceRegistryBuilder;


public class HibernateUtil {

    private static SessionFactory sessionFactory;

    static {
        try {

            Configuration configuration = new  AnnotationConfiguration();;
            configuration.configure();
            ServiceRegistry sr = new ServiceRegistryBuilder().applySettings(configuration.getProperties()).buildServiceRegistry();
            sessionFactory = configuration.buildSessionFactory(sr);
        } catch (Throwable ex) {
            // Log the exception. 
            System.err.println("Initial SessionFactory creation failed." + ex);
            throw new ExceptionInInitializerError(ex);
        }
    }

    public static SessionFactory getSessionFactory() {
        return sessionFactory;
    }

}

@Transactional

public class stufImp implements stufDAO , Serializable {


          private SessionFactory sf = HibernateUtil.getSessionFactory();
          Session session ;

           public stufImp() {

    }


    @Override
    public List<Stuf> getAllstufs() {

                session=sf.getCurrentSession();
        session.beginTransaction();
        List<Stuf> stufs= session.createQuery("from Stuf").list();
        session.getTransaction().commit(); 
        System.out.println("getting All Stufs");

        return stufs;
    }

....................

1 个答案:

答案 0 :(得分:1)

对于初学者,首先删除用于配置hibernate的HibernateUtil,然后修复你的dao。你应该从不Session存储在一个实例变量中,至少在你的dao是一个单例时是这样。 (想象一下,如果有2个并发请求进入会话会发生什么情况!)。

要配置休眠SessionFactory,请使用spring中的LocalSessionFactoryBean。 (the reference guidejavadoc)中的详细信息。

<bean id="sessionFactory" class="org.springframework.orm.hibernate4.LocalSessionFactoryBean" >
</bean>

您还需要事务管理器并启用注释驱动的事务。

<bean id="transactionManager" class="org.springframework.orm.hibernate4.HibernateTransactionManager">
    <property name="sessionFactory" ref="sessionFactory" />
</bean>

<tx:annotation-driven /> <!-- By default references 'transactionManager' -->

修改你的dao(见reference guide)。

@Transactional
public class stufImp implements stufDAO , Serializable {

    @Autowired
    private SessionFactory sf;

    @Override
    public List<Stuf> getAllstufs() {
        return sf.getCurrentSession().createQuery("from Stuf").list();
    }
}

链接

  1. 在春季设置SessionFactory reference guide
  2. 实施道士reference guide