You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geode.apache.org by Gregory Chase <gc...@pivotal.io> on 2016/10/20 15:01:35 UTC
Re: [VIDEO] Geode Clubhouse Replay - New Security Framework for
Apache Geode
All,
I've posted the replay to Jinmei's very educational talk yesterday about
the new security framework in Apache Geode. You can find it here in its
entirety, or you can jump to your favorite section using the table of
contents below:
01:34 How do people interact with Geode in ways that need to be secured?
<https://youtu.be/AhUPT3wfAMM?t=1m34s>
02:52 What security capabilities does Geode need to provide?
<https://youtu.be/AhUPT3wfAMM?t=2m52s>
03:36 How did security work in Geode before?
<https://youtu.be/AhUPT3wfAMM?t=3m36s>
06:49 Overview of new Geode security framework
<https://youtu.be/AhUPT3wfAMM?t=6m49s>
08:14 Code for SecurityManager interface
<https://youtu.be/AhUPT3wfAMM?t=8m14s>
10:21 About Users, Roles, Resource Permissions, and Operations
<https://youtu.be/AhUPT3wfAMM?t=10m21s>
20:09 How to implement application-specific roles
<https://youtu.be/AhUPT3wfAMM?t=20m09s>
23:05 How to implement data-member access control with post processing
<https://youtu.be/AhUPT3wfAMM?t=23m05s>
25:30 Demo of framework using multiple GFSH users
<https://youtu.be/AhUPT3wfAMM?t=25m30s>
36:19 Q: Can someone update security settings while the cluster is running?
<https://youtu.be/AhUPT3wfAMM?t=36m19s>
40:46 How Geode uses Apache Shiro to implement security
<https://youtu.be/AhUPT3wfAMM?t=40m46s>
42:55 Future directions or enhancing security with Apache Shiro
<https://youtu.be/AhUPT3wfAMM?t=42m55s>
44:17 Q: How can the app developer know which user is executing a function?
<https://youtu.be/AhUPT3wfAMM?t=44m17s>
46:50 How does the new security framework fit with Spring Security and
Spring Data Geode? <https://youtu.be/AhUPT3wfAMM?t=46m50s>
50:42 <https://youtu.be/AhUPT3wfAMM?t=50m42s> For the next version of
Geode, the old security paradigm is supported for backward
<https://youtu.be/AhUPT3wfAMM?t=50m42s>compatibility
51:21 What releases of Geode have the new security functionality?
<https://youtu.be/AhUPT3wfAMM?t=51m21s>
On Wed, Oct 19, 2016 at 8:24 AM, Gregory Chase <gc...@pivotal.io> wrote:
> Final reminder. The next Geode Clubhouse about the new security framework
> starts in just over 30 minutes.
>
> Join the meeting <http://spr.ly/GeodeClubhouse>
>
> On Tue, Oct 18, 2016 at 12:59 PM, Gregory Chase <gc...@pivotal.io> wrote:
>
>> Greetings Geode Community,
>> This is just a friendly reminder of our virtual meet up tomorrow, 9AM,
>> where Jinmei will discuss her work implementing the new security framework
>> for Apache Geode!
>>
>> Add to calendar
>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>
>>
>> On Wed, Oct 12, 2016 at 4:45 PM, Gregory Chase <gc...@pivotal.io> wrote:
>>
>>> Dear Geode Community,
>>>
>>> Ok, its back to APIs this month as we explore the new security framework
>>> with Jinmei Liao this next Weds, October 19, at 9AM Pacific.
>>>
>>> Add to calendar
>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>> | Join the meeting <http://Spr.ly/GeodeClubhouse>
>>>
>>> With the recent release of Apache Geode 1.0 M3, Apache Geode has had a
>>> major revision of its security capabilities with the inclusion of
>>> Apache Shiro.
>>>
>>> In this talk, Jinmei Liao, committer with Apache Geode, will talk about
>>> the new capabilities, how they unify role-based access for all
>>> communication channels, and discuss what the future roadmap may look like.
>>>
>>> She'll review Geode's prior security implementation, give a
>>> demonstration of the new paradigm, and describe how these were implemented
>>> using Apache Shiro.
>>>
>>> *About the speaker*
>>> Jinmei Liao is a software engineer with a decade and a half experience
>>> working working with Java, Spring, distributed systems, and security technology.
>>> Most recently Jinmei has been leading development of security capabilities
>>> for the Apache Geode in-memory data grid, and is a committer for the Apache
>>> Geode project. Jinmei is the mother of two teenage boys and enjoys cooking
>>> and painting.
>>>
>>> See you next Weds!
>>>
>>> Add to calendar
>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>>
>>> --
>>> Greg Chase
>>>
>>> Global Head, Big Data Communities
>>> http://www.pivotal.io/big-data
>>>
>>> Pivotal Software
>>> http://www.pivotal.io/
>>>
>>> 650-215-0477
>>> @GregChase
>>> Blog: http://geekmarketing.biz/
>>>
>>>
>>
>>
>> --
>> Greg Chase
>>
>> Global Head, Big Data Communities
>> http://www.pivotal.io/big-data
>>
>> Pivotal Software
>> http://www.pivotal.io/
>>
>> 650-215-0477
>> @GregChase
>> Blog: http://geekmarketing.biz/
>>
>>
>
>
> --
> Greg Chase
>
> Global Head, Big Data Communities
> http://www.pivotal.io/big-data
>
> Pivotal Software
> http://www.pivotal.io/
>
> 650-215-0477
> @GregChase
> Blog: http://geekmarketing.biz/
>
>
--
Greg Chase
Global Head, Big Data Communities
http://www.pivotal.io/big-data
Pivotal Software
http://www.pivotal.io/
650-215-0477
@GregChase
Blog: http://geekmarketing.biz/
Re: [VIDEO] Geode Clubhouse Replay - New Security Framework for
Apache Geode
Posted by Gregory Chase <gc...@pivotal.io>.
Forgot to add some links at the top...
On Thu, Oct 20, 2016 at 8:01 AM, Gregory Chase <gc...@pivotal.io> wrote:
> All,
> I've posted the replay to Jinmei's very educational talk yesterday about
> the new security framework in Apache Geode. You can find it here in its
> entirety <https://youtu.be/AhUPT3wfAMM>, download it for offline viewing
> <https://www.dropbox.com/s/tf7dyfwbzu6bpr4/New%20Security%20in%20Apache%20Geode.m4v?dl=0>,
> or you can jump to your favorite section using the table of contents below:
>
> 01:34 How do people interact with Geode in ways that need to be secured?
> <https://youtu.be/AhUPT3wfAMM?t=1m34s>
> 02:52 What security capabilities does Geode need to provide?
> <https://youtu.be/AhUPT3wfAMM?t=2m52s>
> 03:36 How did security work in Geode before?
> <https://youtu.be/AhUPT3wfAMM?t=3m36s>
> 06:49 Overview of new Geode security framework
> <https://youtu.be/AhUPT3wfAMM?t=6m49s>
> 08:14 Code for SecurityManager interface
> <https://youtu.be/AhUPT3wfAMM?t=8m14s>
> 10:21 About Users, Roles, Resource Permissions, and Operations
> <https://youtu.be/AhUPT3wfAMM?t=10m21s>
> 20:09 How to implement application-specific roles
> <https://youtu.be/AhUPT3wfAMM?t=20m09s>
> 23:05 How to implement data-member access control with post processing
> <https://youtu.be/AhUPT3wfAMM?t=23m05s>
> 25:30 Demo of framework using multiple GFSH users
> <https://youtu.be/AhUPT3wfAMM?t=25m30s>
> 36:19 Q: Can someone update security settings while the cluster is
> running? <https://youtu.be/AhUPT3wfAMM?t=36m19s>
> 40:46 How Geode uses Apache Shiro to implement security
> <https://youtu.be/AhUPT3wfAMM?t=40m46s>
> 42:55 Future directions or enhancing security with Apache Shiro
> <https://youtu.be/AhUPT3wfAMM?t=42m55s>
> 44:17 Q: How can the app developer know which user is executing a
> function? <https://youtu.be/AhUPT3wfAMM?t=44m17s>
> 46:50 How does the new security framework fit with Spring Security and
> Spring Data Geode? <https://youtu.be/AhUPT3wfAMM?t=46m50s>
> 50:42 <https://youtu.be/AhUPT3wfAMM?t=50m42s> For the next version of
> Geode, the old security paradigm is supported for backward
> <https://youtu.be/AhUPT3wfAMM?t=50m42s>compatibility
> 51:21 What releases of Geode have the new security functionality?
> <https://youtu.be/AhUPT3wfAMM?t=51m21s>
>
> On Wed, Oct 19, 2016 at 8:24 AM, Gregory Chase <gc...@pivotal.io> wrote:
>
>> Final reminder. The next Geode Clubhouse about the new security framework
>> starts in just over 30 minutes.
>>
>> Join the meeting <http://spr.ly/GeodeClubhouse>
>>
>> On Tue, Oct 18, 2016 at 12:59 PM, Gregory Chase <gc...@pivotal.io>
>> wrote:
>>
>>> Greetings Geode Community,
>>> This is just a friendly reminder of our virtual meet up tomorrow, 9AM,
>>> where Jinmei will discuss her work implementing the new security framework
>>> for Apache Geode!
>>>
>>> Add to calendar
>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>>
>>>
>>> On Wed, Oct 12, 2016 at 4:45 PM, Gregory Chase <gc...@pivotal.io>
>>> wrote:
>>>
>>>> Dear Geode Community,
>>>>
>>>> Ok, its back to APIs this month as we explore the new security
>>>> framework with Jinmei Liao this next Weds, October 19, at 9AM Pacific.
>>>>
>>>> Add to calendar
>>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>>> | Join the meeting <http://Spr.ly/GeodeClubhouse>
>>>>
>>>> With the recent release of Apache Geode 1.0 M3, Apache Geode has had a
>>>> major revision of its security capabilities with the inclusion of
>>>> Apache Shiro.
>>>>
>>>> In this talk, Jinmei Liao, committer with Apache Geode, will talk about
>>>> the new capabilities, how they unify role-based access for all
>>>> communication channels, and discuss what the future roadmap may look like.
>>>>
>>>> She'll review Geode's prior security implementation, give a
>>>> demonstration of the new paradigm, and describe how these were implemented
>>>> using Apache Shiro.
>>>>
>>>> *About the speaker*
>>>> Jinmei Liao is a software engineer with a decade and a half experience
>>>> working working with Java, Spring, distributed systems, and security technology.
>>>> Most recently Jinmei has been leading development of security capabilities
>>>> for the Apache Geode in-memory data grid, and is a committer for the Apache
>>>> Geode project. Jinmei is the mother of two teenage boys and enjoys cooking
>>>> and painting.
>>>>
>>>> See you next Weds!
>>>>
>>>> Add to calendar
>>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>>>
>>>> --
>>>> Greg Chase
>>>>
>>>> Global Head, Big Data Communities
>>>> http://www.pivotal.io/big-data
>>>>
>>>> Pivotal Software
>>>> http://www.pivotal.io/
>>>>
>>>> 650-215-0477
>>>> @GregChase
>>>> Blog: http://geekmarketing.biz/
>>>>
>>>>
>>>
>>>
>>> --
>>> Greg Chase
>>>
>>> Global Head, Big Data Communities
>>> http://www.pivotal.io/big-data
>>>
>>> Pivotal Software
>>> http://www.pivotal.io/
>>>
>>> 650-215-0477
>>> @GregChase
>>> Blog: http://geekmarketing.biz/
>>>
>>>
>>
>>
>> --
>> Greg Chase
>>
>> Global Head, Big Data Communities
>> http://www.pivotal.io/big-data
>>
>> Pivotal Software
>> http://www.pivotal.io/
>>
>> 650-215-0477
>> @GregChase
>> Blog: http://geekmarketing.biz/
>>
>>
>
>
> --
> Greg Chase
>
> Global Head, Big Data Communities
> http://www.pivotal.io/big-data
>
> Pivotal Software
> http://www.pivotal.io/
>
> 650-215-0477
> @GregChase
> Blog: http://geekmarketing.biz/
>
>
--
Greg Chase
Global Head, Big Data Communities
http://www.pivotal.io/big-data
Pivotal Software
http://www.pivotal.io/
650-215-0477
@GregChase
Blog: http://geekmarketing.biz/
Re: [VIDEO] Geode Clubhouse Replay - New Security Framework for
Apache Geode
Posted by Gregory Chase <gc...@pivotal.io>.
Forgot to add some links at the top...
On Thu, Oct 20, 2016 at 8:01 AM, Gregory Chase <gc...@pivotal.io> wrote:
> All,
> I've posted the replay to Jinmei's very educational talk yesterday about
> the new security framework in Apache Geode. You can find it here in its
> entirety <https://youtu.be/AhUPT3wfAMM>, download it for offline viewing
> <https://www.dropbox.com/s/tf7dyfwbzu6bpr4/New%20Security%20in%20Apache%20Geode.m4v?dl=0>,
> or you can jump to your favorite section using the table of contents below:
>
> 01:34 How do people interact with Geode in ways that need to be secured?
> <https://youtu.be/AhUPT3wfAMM?t=1m34s>
> 02:52 What security capabilities does Geode need to provide?
> <https://youtu.be/AhUPT3wfAMM?t=2m52s>
> 03:36 How did security work in Geode before?
> <https://youtu.be/AhUPT3wfAMM?t=3m36s>
> 06:49 Overview of new Geode security framework
> <https://youtu.be/AhUPT3wfAMM?t=6m49s>
> 08:14 Code for SecurityManager interface
> <https://youtu.be/AhUPT3wfAMM?t=8m14s>
> 10:21 About Users, Roles, Resource Permissions, and Operations
> <https://youtu.be/AhUPT3wfAMM?t=10m21s>
> 20:09 How to implement application-specific roles
> <https://youtu.be/AhUPT3wfAMM?t=20m09s>
> 23:05 How to implement data-member access control with post processing
> <https://youtu.be/AhUPT3wfAMM?t=23m05s>
> 25:30 Demo of framework using multiple GFSH users
> <https://youtu.be/AhUPT3wfAMM?t=25m30s>
> 36:19 Q: Can someone update security settings while the cluster is
> running? <https://youtu.be/AhUPT3wfAMM?t=36m19s>
> 40:46 How Geode uses Apache Shiro to implement security
> <https://youtu.be/AhUPT3wfAMM?t=40m46s>
> 42:55 Future directions or enhancing security with Apache Shiro
> <https://youtu.be/AhUPT3wfAMM?t=42m55s>
> 44:17 Q: How can the app developer know which user is executing a
> function? <https://youtu.be/AhUPT3wfAMM?t=44m17s>
> 46:50 How does the new security framework fit with Spring Security and
> Spring Data Geode? <https://youtu.be/AhUPT3wfAMM?t=46m50s>
> 50:42 <https://youtu.be/AhUPT3wfAMM?t=50m42s> For the next version of
> Geode, the old security paradigm is supported for backward
> <https://youtu.be/AhUPT3wfAMM?t=50m42s>compatibility
> 51:21 What releases of Geode have the new security functionality?
> <https://youtu.be/AhUPT3wfAMM?t=51m21s>
>
> On Wed, Oct 19, 2016 at 8:24 AM, Gregory Chase <gc...@pivotal.io> wrote:
>
>> Final reminder. The next Geode Clubhouse about the new security framework
>> starts in just over 30 minutes.
>>
>> Join the meeting <http://spr.ly/GeodeClubhouse>
>>
>> On Tue, Oct 18, 2016 at 12:59 PM, Gregory Chase <gc...@pivotal.io>
>> wrote:
>>
>>> Greetings Geode Community,
>>> This is just a friendly reminder of our virtual meet up tomorrow, 9AM,
>>> where Jinmei will discuss her work implementing the new security framework
>>> for Apache Geode!
>>>
>>> Add to calendar
>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>>
>>>
>>> On Wed, Oct 12, 2016 at 4:45 PM, Gregory Chase <gc...@pivotal.io>
>>> wrote:
>>>
>>>> Dear Geode Community,
>>>>
>>>> Ok, its back to APIs this month as we explore the new security
>>>> framework with Jinmei Liao this next Weds, October 19, at 9AM Pacific.
>>>>
>>>> Add to calendar
>>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>>> | Join the meeting <http://Spr.ly/GeodeClubhouse>
>>>>
>>>> With the recent release of Apache Geode 1.0 M3, Apache Geode has had a
>>>> major revision of its security capabilities with the inclusion of
>>>> Apache Shiro.
>>>>
>>>> In this talk, Jinmei Liao, committer with Apache Geode, will talk about
>>>> the new capabilities, how they unify role-based access for all
>>>> communication channels, and discuss what the future roadmap may look like.
>>>>
>>>> She'll review Geode's prior security implementation, give a
>>>> demonstration of the new paradigm, and describe how these were implemented
>>>> using Apache Shiro.
>>>>
>>>> *About the speaker*
>>>> Jinmei Liao is a software engineer with a decade and a half experience
>>>> working working with Java, Spring, distributed systems, and security technology.
>>>> Most recently Jinmei has been leading development of security capabilities
>>>> for the Apache Geode in-memory data grid, and is a committer for the Apache
>>>> Geode project. Jinmei is the mother of two teenage boys and enjoys cooking
>>>> and painting.
>>>>
>>>> See you next Weds!
>>>>
>>>> Add to calendar
>>>> <https://www.google.com/calendar/event?eid=bnM3ODdjYms2bm05aDJwYnJrYnBrb2Q2YnMgcGl2b3RhbC5pb191OGtndnVhaGprYm9oMWduZmh2NXRzMnY5Y0Bn&ctz=America/Los_Angeles>
>>>> | Join the meeting <http://spr.ly/GeodeClubhouse>
>>>>
>>>> --
>>>> Greg Chase
>>>>
>>>> Global Head, Big Data Communities
>>>> http://www.pivotal.io/big-data
>>>>
>>>> Pivotal Software
>>>> http://www.pivotal.io/
>>>>
>>>> 650-215-0477
>>>> @GregChase
>>>> Blog: http://geekmarketing.biz/
>>>>
>>>>
>>>
>>>
>>> --
>>> Greg Chase
>>>
>>> Global Head, Big Data Communities
>>> http://www.pivotal.io/big-data
>>>
>>> Pivotal Software
>>> http://www.pivotal.io/
>>>
>>> 650-215-0477
>>> @GregChase
>>> Blog: http://geekmarketing.biz/
>>>
>>>
>>
>>
>> --
>> Greg Chase
>>
>> Global Head, Big Data Communities
>> http://www.pivotal.io/big-data
>>
>> Pivotal Software
>> http://www.pivotal.io/
>>
>> 650-215-0477
>> @GregChase
>> Blog: http://geekmarketing.biz/
>>
>>
>
>
> --
> Greg Chase
>
> Global Head, Big Data Communities
> http://www.pivotal.io/big-data
>
> Pivotal Software
> http://www.pivotal.io/
>
> 650-215-0477
> @GregChase
> Blog: http://geekmarketing.biz/
>
>
--
Greg Chase
Global Head, Big Data Communities
http://www.pivotal.io/big-data
Pivotal Software
http://www.pivotal.io/
650-215-0477
@GregChase
Blog: http://geekmarketing.biz/