You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@jackrabbit.apache.org by "Marcel Reutegger (JIRA)" <ji...@apache.org> on 2005/03/29 11:36:17 UTC

[jira] Closed: (JCR-81) Implement anonymous login with credentials

     [ http://issues.apache.org/jira/browse/JCR-81?page=history ]
     
Marcel Reutegger closed JCR-81:
-------------------------------


> Implement anonymous login with credentials
> ------------------------------------------
>
>          Key: JCR-81
>          URL: http://issues.apache.org/jira/browse/JCR-81
>      Project: Jackrabbit
>         Type: Bug
>   Components: security
>  Environment: svn revision: 158911
>     Reporter: Marcel Reutegger
>     Assignee: Marcel Reutegger
>     Priority: Minor

>
> Jackrabbit currently implements anonymous login by detecting a null credentials argument on login. This is actually not compliant to the specification.
> <spec>
> If credentials is null, it is assumed that authentication is handled by a mechanism external to the repository itself (for example, through the JAAS framework) and that the repository implementation exists within a context (for example, an application server) that allows it to handle authorization of the request for access to the specified workspace.
> </spec>
> Jackrabbit should rather support anonymous login with a defined credential, either some subclass of SimpleCredentials or a predefined / known userId that has read-only access.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira