You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@turbine.apache.org by Eric Dobbs <er...@dobbse.net> on 2002/02/04 20:13:09 UTC

Re: New security model

On Tuesday, January 29, 2002, at 06:47  AM, Gonzalo A. Diethelm wrote:

> Eric, you bring up several good points. Why don't you
> go ahead and try to cook up some Java code (preferably
> interfaces or very basic classes) along your lines of
> thought?

Hey Gonzalo, (and all).

Just committed some items for discussion.  I think we
should move all of the interfaces into o.a.t.security
and put the specific implementations into
o.a.t.security.turbine.  With this in mind, I took the
liberty of putting a few empty interfaces along these
lines, but I stopped short of moving your code, in case
there were objections to this idea.

The stuff I added doesn't compile yet.  But I thought
there was enough to continue the conversation about.

-Eric

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: New security model

Posted by Colin Chalmers <co...@maxware.nl>.
I'll second that too.

Is it not the idea to keep security pluggable (such as Realms with or
without Tomcat) and to avoid tying things into a servlet runner so that the
code can be reused as much as possible?

I welcome the idea of a joint discussion.

/Colin



> On Monday, February 4, 2002, at 12:42  PM, Gonzalo A. Diethelm wrote:
> > Also, it would be good to bring the discussion regarding LDAP
> > (thread called "LDAP Authentication") into the new security
> > model and seeing how well it blends in.
>
> Thinking exactly along these lines, myself.
>
> -Eric
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>
>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: New security model

Posted by Eric Dobbs <er...@dobbse.net>.
On Monday, February 4, 2002, at 12:42  PM, Gonzalo A. Diethelm wrote:
> Also, it would be good to bring the discussion regarding LDAP
> (thread called "LDAP Authentication") into the new security
> model and seeing how well it blends in.

Thinking exactly along these lines, myself.

-Eric

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


RE: New security model

Posted by "Gonzalo A. Diethelm" <go...@aditiva.com>.
> > Eric, you bring up several good points. Why don't you
> > go ahead and try to cook up some Java code (preferably
> > interfaces or very basic classes) along your lines of
> > thought?
> 
> Just committed some items for discussion.  I think we
> should move all of the interfaces into o.a.t.security
> and put the specific implementations into
> o.a.t.security.turbine.  With this in mind, I took the
> liberty of putting a few empty interfaces along these
> lines, but I stopped short of moving your code, in case
> there were objections to this idea.

Go ahead with your proposed changes.

> The stuff I added doesn't compile yet.  But I thought
> there was enough to continue the conversation about.

Ok, that's great. I am in the middle of a series of trips
outside the country, and have been (and will be) out of
touch for a couple of days. Please keep the discussion alive
and I will try to jump in when time avails.

Also, it would be good to bring the discussion regarding LDAP
(thread called "LDAP Authentication") into the new security
model and seeing how well it blends in.

> -Eric


-- 
Gonzalo A. Diethelm
gonzalo.diethelm@aditiva.com


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>