Home/ Questions/Q 8896631
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T00:07:13+00:00

I am writing a GWT application and and I need to only load certain

  • 0

I am writing a GWT application and and I need to only load certain widgets based on User Roles. For eg. there maybe admin widgets, user widgets etc.

Any thoughts how I can implement this?

One option is that I can check the role in the code and hide them. But since this code gets Executed at the client side I think this is a security risk.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You should manage the roles on server side:

    1. Pass the role somehow to your Root widget.

      • RPC call to server during onModuleLoad to ask the Role

      • Or simply pass it from JSP to JS and use native get from the Widget.

    2. Build required panel

    Yes, you still have some risk, since all your js code in on the client, and it can modify the flow using JS debug. To prevent this you need to filter all calls to server side from Admin widgets and make them failing without successful result for example. So, admin widget can do nothing, because all calls to Server will fail.

    If it still not safe enough for you – then you can use separate GWT Entry Points. In this case you will forward clients to separate pages with separate JS code.

    • 0