You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@jackrabbit.apache.org by simer anand <si...@gmail.com> on 2009/09/01 12:10:28 UTC
providing authorized access to users in repository
Hello Users,
After following much about JAAS tutorials and also
implemented the Jaas Authentication part need to know about Jaas
Authorizations. To do this i read the Jaas Authentication part but don't
know how to implement it to repository so that different access is to be
provided to the the nodes depending upon users. All i did is i went through
the Jaas Authorization examples and executed them.
Thanks in advance for any reply following
simer
--
View this message in context: http://www.nabble.com/providing-authorized-access-to-users-in-repository-tp25237684p25237684.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.
Re: providing authorized access to users in repository
Posted by simer anand <si...@gmail.com>.
Hello Users,
I need to know how i can use Jaas Authorisation in
repository in the sense that i can assign different users different access
and these users can be under different groups and having different roles.
For this I have started with the JAAS Authorization tutorials and then
executed their sample programs as an standalone they worked fine but didn't
got it how can i make them use in my way.
Thanks
--
View this message in context: http://www.nabble.com/providing-authorized-access-to-users-in-repository-tp25237684p25288087.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.
Re: providing authorized access to users in repository
Posted by simer anand <si...@gmail.com>.
Hello Users,
I need to know how i can use Jaas Authorisation in
repository in the sense that i can assign different users different access
and these users can be under different groups and having different roles.
For this I have started with the JAAS Authorization tutorials and then
executed their sample programs as an standalone they worked fine but didn't
got it how can i make them use in my way.
--
View this message in context: http://www.nabble.com/providing-authorized-access-to-users-in-repository-tp25237684p25254897.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.
Re: providing authorized access to users in repository
Posted by simer anand <si...@gmail.com>.
Hello Users,
I need to know how i can use Jaas Authorisation in
repository in the sense that i can assign different users different access
and these users can be under different groups and having different roles.
For this I have started with the JAAS Authorization tutorials and then
executed their sample programs as an standalone they worked fine but didn't
got it how can i make them use in my way.
Thanks in advance for any following reply.
--
View this message in context: http://www.nabble.com/providing-authorized-access-to-users-in-repository-tp25237684p25254905.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.
Re: providing authorized access to users in repository
Posted by simer anand <si...@gmail.com>.
On Mon, Sep 7, 2009 at 10:47 AM, Mihai Vasilache
<mi...@yahoo.com>wrote:
> Actually i implemented the security using capability model instead ACL in
> my application. I will send later some details.
> The ideea is that you must understand jaas first (not so easy because there
> is not so much documentation), then you must implement an
> org.apache.jackrabbit.core.security.AccessManager
>
> a good start with some examples: http://www.jaasbook.com/
>
> Mihai
>
Hello Mihai and Users,
1. Actually i started with JAAS
authentication only and also implemented it into my repository and after
that i tried to use Jaas authorization and then i was asked to follow ACL
thing and which i found new and bit difficult .
So can you please guide me how to do it (the authorization thing) and what
about capability model ?
2. Another thing is i want to add a
feature of *add and store new users account into jackrabbit *and want to
know how it can be done. I' m using Jaas based authentication.
Thanks for any following reply
Re: providing authorized access to users in repository (the Capability Model vs. ACL)
Posted by Mihai Vasilache <mi...@yahoo.com>.
Hi,
I wrote some explanations on:
http://interfacesdesign.blogspot.com/2009/09/jaas-in-jackrabbit.html
Now i am realizing that my capability model approach it is quite complicated. But anyway... You can try the default jackrabbit acl. it must be much easier.
I like my implementation because is xpath based, i can use variables inside xpath and i do not need to set acl permissions on each node i am creating.
Mihai
--- On Mon, 9/7/09, Mihai Vasilache <mi...@yahoo.com> wrote:
From: Mihai Vasilache <mi...@yahoo.com>
Subject: Re: providing authorized access to users in repository
To: users@jackrabbit.apache.org
Date: Monday, September 7, 2009, 8:47 AM
Actually i implemented the security using capability model instead ACL in my application. I will send later some details.
The ideea is that you must understand jaas first (not so easy because there is not so much documentation), then you must implement an org.apache.jackrabbit.core.security.AccessManager
a good start with some examples: http://www.jaasbook.com/
Mihai
--- On Fri, 9/4/09, Jukka Zitting <ju...@gmail.com> wrote:
From: Jukka Zitting <ju...@gmail.com>
Subject: Re: providing authorized access to users in repository
To: users@jackrabbit.apache.org
Date: Friday, September 4, 2009, 3:43 PM
Hi,
On Tue, Sep 1, 2009 at 12:10 PM, simer anand<si...@gmail.com> wrote:
> After following much about JAAS tutorials and also
> implemented the Jaas Authentication part need to know about Jaas
> Authorizations. To do this i read the Jaas Authentication part but don't
> know how to implement it to repository so that different access is to be
> provided to the the nodes depending upon users.
Currently Jackrabbit only uses JAAS for authentication. Authorization
is based on an ACL-system specified in the JCR 2.0 drafts.
You can also extend Jackrabbit with a custom authorization mechanism
(including one based on JAAS) by implementing the internal Jackrabbit
security API.
BR,
Jukka Zitting
Re: providing authorized access to users in repository
Posted by Mihai Vasilache <mi...@yahoo.com>.
Actually i implemented the security using capability model instead ACL in my application. I will send later some details.
The ideea is that you must understand jaas first (not so easy because there is not so much documentation), then you must implement an org.apache.jackrabbit.core.security.AccessManager
a good start with some examples: http://www.jaasbook.com/
Mihai
--- On Fri, 9/4/09, Jukka Zitting <ju...@gmail.com> wrote:
From: Jukka Zitting <ju...@gmail.com>
Subject: Re: providing authorized access to users in repository
To: users@jackrabbit.apache.org
Date: Friday, September 4, 2009, 3:43 PM
Hi,
On Tue, Sep 1, 2009 at 12:10 PM, simer anand<si...@gmail.com> wrote:
> After following much about JAAS tutorials and also
> implemented the Jaas Authentication part need to know about Jaas
> Authorizations. To do this i read the Jaas Authentication part but don't
> know how to implement it to repository so that different access is to be
> provided to the the nodes depending upon users.
Currently Jackrabbit only uses JAAS for authentication. Authorization
is based on an ACL-system specified in the JCR 2.0 drafts.
You can also extend Jackrabbit with a custom authorization mechanism
(including one based on JAAS) by implementing the internal Jackrabbit
security API.
BR,
Jukka Zitting
Re: providing authorized access to users in repository
Posted by Jukka Zitting <ju...@gmail.com>.
Hi,
On Tue, Sep 1, 2009 at 12:10 PM, simer anand<si...@gmail.com> wrote:
> After following much about JAAS tutorials and also
> implemented the Jaas Authentication part need to know about Jaas
> Authorizations. To do this i read the Jaas Authentication part but don't
> know how to implement it to repository so that different access is to be
> provided to the the nodes depending upon users.
Currently Jackrabbit only uses JAAS for authentication. Authorization
is based on an ACL-system specified in the JCR 2.0 drafts.
You can also extend Jackrabbit with a custom authorization mechanism
(including one based on JAAS) by implementing the internal Jackrabbit
security API.
BR,
Jukka Zitting