Custom security implementation

[Francesco Milesi <fr...@inetconsulting.it>]

Hi everybody,

I am a slide 2.0 newby and I have three questions

1. I would like to read users, groups and roles from my database to
integrate slide into my application. I have quickly looked at code and  it
seems that slide uses the realm only to athenticate users but all permission
checks are done accessing the security store. So I would like to set all
stores to TxXMLFileDescriptorsStore except security store that should be a
j2ee or jdbc store.  Is it possible to configure the application that way or
I have to modify existing code ?

2. In certain cases a user belongs to a role based on the value of a custom
property of the node he needs to read or modify. So he will have permission
to do something with the node, depending on such node property value that
determines roles he belongs to. I need to write my own implementation of
org.apache.slide.security.ACLSecurityImpl and to modify the security store
code or should I do something else ?

3. When I delete collections related descriptors disappear, but filesystem
directories are not deleted. It is possible to elminate them to ?

Many thanks for your help

Ciao Francesco


---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org

Re: Custom security implementation

[James Mason <ma...@apache.org>]

Francesco Milesi wrote:
> Hi everybody,
> 
> I am a slide 2.0 newby and I have three questions
> 
> 1. I would like to read users, groups and roles from my database to
> integrate slide into my application. I have quickly looked at code and  it
> seems that slide uses the realm only to athenticate users but all permission
> checks are done accessing the security store. So I would like to set all
> stores to TxXMLFileDescriptorsStore except security store that should be a
> j2ee or jdbc store.  Is it possible to configure the application that way or
> I have to modify existing code ?

The SecurityStore is responsible for storing the ACL of an object. Based 
on what you're saying I think what you want to do is create a Store 
implmentation that uses your database and is mounted on /users and 
/roles. The JNDIPrincipalStore in Slide 2.1 does something similar to 
expose LDAP users and groups to Slide.

> 
> 2. In certain cases a user belongs to a role based on the value of a custom
> property of the node he needs to read or modify. So he will have permission
> to do something with the node, depending on such node property value that
> determines roles he belongs to. I need to write my own implementation of
> org.apache.slide.security.ACLSecurityImpl and to modify the security store
> code or should I do something else ?

I'm not entirely sure how what you're describing works, but yes, if you 
need to determine permissions based on something other than the ACL 
you'll need to write your own security implementation.

> 
> 3. When I delete collections related descriptors disappear, but filesystem
> directories are not deleted. It is possible to elminate them to ?

This is by design to workaround a bug. You can search the mailing lists 
for discussions about it. I don't know when/if it will be resolved.

-James

> 
> Many thanks for your help
> 
> Ciao Francesco
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
> 
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org