You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@turbine.apache.org by hh...@apache.org on 2003/12/08 17:13:43 UTC
cvs commit: jakarta-turbine-fulcrum/security/xdocs/images basic.bmp dynamic.bmp turbine.bmp
hhernandez 2003/12/08 08:13:43
Added: security/xdocs example.xml
security/xdocs/images basic.bmp dynamic.bmp turbine.bmp
Log:
Added an example of how to implement security in the three models. We still need to find out the solution using the dynamic model. Also added some pictures of the data models for the models.
Revision Changes Path
1.1 jakarta-turbine-fulcrum/security/xdocs/example.xml
Index: example.xml
===================================================================
<?xml version="1.0"?>
<document>
<properties>
<title>Example of the security models</title>
<author email="hhernandez@itweb.com.mx">Humberto Hernandez</author>
</properties>
<body>
<section name="Example">
<subsection name="Requirements">
<p>
This is example is inspired in Scarab but it doesn't follow it exactly. The system controls bug reports in a software project.
The system allows the following operations.
</p>
<ul>
<li>create an issue.</li>
<li>view an issue.</li>
<li>modify an issue.</li>
<li>close an issue.</li>
</ul>
<p>The system is able to manage several projects.</p>
<ul>
<li>Project A.</li>
<li>Project B.</li>
</ul>
<p>And there are several roles in each project:</p>
<ul>
<li>Manager - It can create an issue, view an issue, modify an issue and close an issue.</li>
<li>Developer - It can create an issue, view an issue and modify an issue.</li>
<li>Observer - It can view an issue.</li>
</ul>
<p>Project A has the following roles and users:</p>
<ul>
<li>Salma is the manager.</li>
<li>Britney and Demi are developers.</li>
<li>Cameron is an observer.</li>
</ul>
<p>Project B has the following roles and users:</p>
<ul>
<li>Demi is the manager.</li>
<li>Madona and Britney are developers.</li>
<li>Barbara is an observer.</li>
</ul>
</subsection>
<subsection name="Turbine">
<ul>
<li>Declare two groups. One for each project.</li>
<li>Declare four permissions. One for each operation.</li>
<li>Declare three roles. Manager, Developer and Observer</li>
<li>Create users for Salma, Britney, Demi, Cameron, Madona and Barbara</li>
<li>Grant Salma the role of manager in project A.</li>
<li>Grant Britney the role of develop in projects A and B.</li>
<li>Grant Demi the role of developer in project A and the role of manager in project B</li>
<li>Grant Cameron the role of observer in project A.</li>
<li>Grant Madona the role of developer in project B.</li>
<li>Grant Barbara the role of observer in project B.</li>
</ul>
</subsection>
<subsection name="Dynamic">
<ul>
<li>Declare a group of "managers for project A"<li>
<li>Declare a group of "developers for project A"<li>
<li>Declare a group of "observers for project A"<li>
<li>Declare a group of "managers for project B"<li>
<li>Declare a group of "developers for project B"<li>
<li>Declare a group of "observers for project B"<li>
<li>Declare four permissions. One for each operation.</li>
<li>Declare three roles. Manager, Developer and Observer</li>
<li>Declare another three groups. One for each role.</li>
<li>Declare another two roles. One for each
<li>Create users for Salma, Britney, Demi, Cameron, Madona and Barbara</li>
<li>Make Salma, Britney, Demi and Cameron part of group "project A".</li>
<li>Make Demi, Madona, Britney and Barbara part of group "project B".</li>
</ul>
<p>We need to do more work on this</p>
</subsection>
<subsection name="Basic">
<ul>
<li>Declare two groups. One for each project</li>li>
<li>Create users for Salma, Britney, Demi, Cameron, Madona and Barbara</li>
<li>Make Salma, Britney, Demi and Cameron part of group "project A".</li>
<li>Make Demi, Madona, Britney and Barbara part of group "project B".</li>
</ul>
<p>
With this configuration you can control that one project is afected only by the members
of the project. However, you don't have control over which operations can be done by each member
within the project.
</p>
</subsection>
</section>
</body>
</document>
1.1 jakarta-turbine-fulcrum/security/xdocs/images/basic.bmp
<<Binary file>>
1.1 jakarta-turbine-fulcrum/security/xdocs/images/dynamic.bmp
<<Binary file>>
1.1 jakarta-turbine-fulcrum/security/xdocs/images/turbine.bmp
<<Binary file>>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org