[jira] Commented: (SLING-820) Implement OSGi User Admin Service on JCR

["Bertrand Delacretaz (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-820?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12662324#action_12662324 ] 

Bertrand Delacretaz commented on SLING-820:
-------------------------------------------

Sling is IMHO the home for this component - maybe common parts can go to the Felix project, but as it's going to use OSGi and JCR, Sling is the right place.

We are going to release our components individually at some point anyway, so if it has no dependencies to Sling people can still use it outside of Sling.

> Implement OSGi User Admin Service on JCR
> ----------------------------------------
>
>                 Key: SLING-820
>                 URL: https://issues.apache.org/jira/browse/SLING-820
>             Project: Sling
>          Issue Type: New Feature
>          Components: JCR
>            Reporter: Felix Meschberger
>
> Now that Jackrabbit starts to support access control (as per its implementation of JSR-283 aka JCR 2.0), it might be usefull to have an OSGi User Admin Specification implementation based on this functionality.
> There would be multiple use cases for this implementation:
> * The Apache Felix Web Console could be extended to use the User Admin Service to authenticate and control access instead of having its internal access control
> * The SlingAuthenticator could support the OSGi Authorization object such that the HttpServletRequest.isUserInRole may be implemented
> The question currently is, where such an implementation would be located:
>   * Apache Felix -- home of the Apache implementation of OSGi specs
>   * Apache Jackrabbit -- home of the JCR reference implementation
>   * Apache Sling -- yeah, you know it ;-)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.