How to capture login name and restrict the view to only records submitted by the user

Question

I'm using Spring Roo, and Spring MVC.

I have Set up Spring Security to use a MySQL database and auth using the standard schema, table users, table authority.

What I have is a webapp to take orders from our sales people in the field. Simply they just fill in the form and submit it to the database.

The ROO generated MVC pages are fine to start, but I need to make some changes and I'm not sure exactly how to do it. I'm just getting my feet wet learning java.

What I need is for our sales order form to capture the username, and the submitted record would be tagged with their username, and then filter the view so that the sales person can only see the records that they themselves have submitted.

Also I would like to implement a stylus signature capture at the bottom of the form. I tried to figure out how to use http://thomasjbradley.ca/lab/signature-pad/#howto but I'm getting lost on where to put the code. I assume in src\\main\\views\\salesorders\\create.jspx I understand this part is off-topic to my original post.

Answer 1

You will need a table in your database that holds the order forms. An important part of this table will be each row will need to contain a way to map back to the user that submitted it. This will most likely be easiest to implement with a column that is a foreign key to the user table.

When it comes time to fetch for forms for a specific user, you will need to query the order forms table and use a WHERE clause that restricts the rows to just the current user.

As for your second question, it will likely be more worthwhile for you to ask in another question on stackoverflow, as it doesn't really pertain to the original question at all.