skills.rest
lutece-platform
lutece-platformOFFICIAL
Explore all skills by this author →
WebsiteGitHub

lutece-rbac

Implement RBAC for Lutece 8 plugins with entity permissions and authorization checks.

3|Updated Feb 2, 2026
Search Tags:#authorization#security#access control#rbac#plugin development#lutece 8
One-click install
npx skills add https://github.com/lutece-platform/lutece-dev-plugin-claude --skill lutece-rbac-lutece-platform
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: lutece-rbac
Source: https://github.com/lutece-platform/lutece-dev-plugin-claude/tree/main/skills/lutece-rbac
Command: npx skills add https://github.com/lutece-platform/lutece-dev-plugin-claude --skill lutece-rbac-lutece-platform

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide and implementation patterns for securing Lutece 8 plugins using Role-Based Access Control (RBAC), ensuring that only authorized users can perform specific actions on specific resources.

Core Features & Use Cases

  • RBAC Implementation: Detailed steps for integrating RBAC into your Lutece 8 plugin.
  • Entity Permissions: Define and manage permissions for custom entities.
  • Service Integration: Guidance on using RBACService, ResourceIdService, and AdminWorkgroupService.
  • Use Case: Secure a custom "Article" entity in your Lutece plugin, allowing only administrators to create and delete articles, while editors can modify them, and regular users can only view them.

Quick Start

Implement RBAC for a new entity by following the steps outlined in the documentation, starting with defining the entity and its resource type.

Frequently Asked Questions about lutece-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement role-based access control in a Lutece 8 plugin?▼

To implement role-based access control in a Lutece 8 plugin, register your resource type, define entity-level permissions, and use RBACService to validate user actions within your JspBeans and template conditionals.

What is a ResourceIdService and how does it work for Lutece plugin security?▼

A ResourceIdService manages entity-specific permissions by mapping resource IDs to authorization checks, enabling the RBACService to verify if a user has the required role to interact with a specific resource instance.

How do I restrict JspBean actions based on user permissions in Lutece 8?▼

Restrict JspBean actions by injecting RBACService authorization checks before processing requests, ensuring only users with the correct entity-level permissions can create, modify, or delete resources.

Can I integrate AdminWorkgroupService with entity-level RBAC permissions?▼

Yes, you can integrate AdminWorkgroupService with entity-level RBAC permissions to combine workgroup-based access control with granular resource permissions, allowing administrators to scope user access to specific resource subsets.

How do I display or hide template UI elements conditionally based on Lutece RBAC permissions?▼

Use template conditionals provided by the RBAC framework to evaluate user permissions against resource types, dynamically rendering or hiding UI elements based on the authenticated user's assigned roles.

Related Skills

Explore More Software Engineering Skills→
pluginagentmarketplacepluginagentmarketplace
1

security-patterns

Implement JWT/OAuth2, RBAC/ABAC, and security controls for REST APIs.

Community
Advanced
ColdBoxColdBox

coldbox-security-authorization

Enforce ColdBox authorization rules for events, URLs, and handler actions.

Official
Intermediate
Arnutt-NArnutt-N

permission-manager

Implement fine-grained permission and access control across HR-IMS resources.

Community
Advanced
DevelopersCoffeeDevelopersCoffee
3

cwe-284-improper-access-control

Implement Spring Security authorization checks to remediate CWE-284 vulnerabilities in Java.

Official
Intermediate