You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@lenya.apache.org by an...@apache.org on 2003/07/31 16:55:23 UTC

cvs commit: cocoon-lenya/src/webapp/lenya/pubs/docs-new/content/xdocs/docs/concepts/accesscontrol accesscontrollers.xml

andreas     2003/07/31 07:55:23

  Modified:    src/webapp/lenya/pubs/docs-new/content/xdocs/docs/concepts/accesscontrol
                        accesscontrollers.xml
  Log:
  added some docs
  
  Revision  Changes    Path
  1.2       +77 -10    cocoon-lenya/src/webapp/lenya/pubs/docs-new/content/xdocs/docs/concepts/accesscontrol/accesscontrollers.xml
  
  Index: accesscontrollers.xml
  ===================================================================
  RCS file: /home/cvs/cocoon-lenya/src/webapp/lenya/pubs/docs-new/content/xdocs/docs/concepts/accesscontrol/accesscontrollers.xml,v
  retrieving revision 1.1
  retrieving revision 1.2
  diff -u -r1.1 -r1.2
  --- accesscontrollers.xml	31 Jul 2003 14:07:42 -0000	1.1
  +++ accesscontrollers.xml	31 Jul 2003 14:55:23 -0000	1.2
  @@ -16,20 +16,87 @@
   <section>
   	<title>Introduction</title>
   	<p>An access controller can be used to authenticate entities and to authorize
  -		requests. (See below for more info on authentication and authorization).
  -		Lenya ships with the following AccessControllers:</p>
  +		requests.</p>
   </section>
  +<section>
  +	<title>Defining the Role in lenya.roles</title>
  +	<source><![CDATA[<role name="org.apache.lenya.cms.ac2.AccessController"
  +    shorthand="access-controller"
  +    default-class="org.apache.lenya.cms.ac2.BypassableAccessController"/>]]></source>
  +</section>
  +			
  +<section>
  +	<title>Declaring an AccessController in cocoon.xconf</title>
  +	
  +	<p>
  +		Each AccessController component needs a type that is attached to the
  +		role attribute, separated with a slash (/). This allows the assignment
  +		of the AccessController to an <link href="accesscontrollerresolvers.html">AccessControllerResolver</link>.
  +		The following example shows the declaration of an AccessController with
  +		the type <em>global</em>:
  +	</p>
  +	
  +	<source><![CDATA[<component logger="lenya.ac.accesscontroller.global"
  +    class="org.apache.lenya.cms.ac2.BypassableAccessController"
  +    role="org.apache.lenya.cms.ac2.AccessController/global">
  +    ...
  +</component>]]></source>
  +
  +</section>
  +
   	<section>
   		<title>DefaultAccessController</title>
  -		<p>The DefaultAccessController combines an Authenticator, an Authorizer, an
  -			AccreditableManager and a PolicyManager to perform these tasks.</p>
  -	</section>
  -	<section>
  -		<title>BypassableAccessController</title>
  -		<p>The BypassableAccessController is a DefaultAccessController that can be
  -			bypassed for certain URL patterns. For URLs that match those patterns
  -			(regular expressions), access is granted for free.</p>
  +		<p>The DefaultAccessController combines an
  +			<link href="authenticators.html">Authenticator</link>, a set of
  +			<link href="authorizers.html">Authorizers</link>, an
  +			<link href="accreditablemanagers.html">AccreditableManager</link> and a
  +			<link href="policymanagers.html">PolicyManager</link> to perform these tasks.</p>
  +		<section>
  +			<title>Declaring an DefaultAccessController in cocoon.xconf</title>
  +			<p>
  +				The DefaultAccessController configuration includes the configuration
  +				of its sub-components, as you see in the following example:
  +			</p>
  +			<source><![CDATA[<component logger="lenya.ac.accesscontroller.global"
  +    class="org.apache.lenya.cms.ac2.DefaultAccessController"
  +    role="org.apache.lenya.cms.ac2.AccessController/global">
  +    
  +  <accreditable-manager type="file">
  +    <parameter name="directory" value="context:///lenya/config/ac/passwd"/>
  +  </accreditable-manager>
  +  
  +  <policy-manager type="file"/>
  +  
  +  <authorizer type="policy"/>
  +  <authorizer type="workflow"/>
  +  <authorizer type="usecase"/>
  +  
  +</component>]]></source>
  +		</section>
   	</section>
  +
  +<section>
  +	<title>BypassableAccessController</title>
  +	<p>The BypassableAccessController is a DefaultAccessController that can be
  +		bypassed for certain URL patterns. For URLs that match those patterns
  +		(regular expressions), access is granted for free.</p>
  +		
  +		<section>
  +			<title>Declaring an DefaultAccessController in cocoon.xconf</title>
  +			<p>
  +				In addition to the DefaultAccessController, the BypassableAccessController
  +				allows the definition of a regular expresssion for the public URL
  +				patterns:
  +			</p>
  +			<source><![CDATA[<component logger="lenya.ac.accesscontroller.global"
  +    class="org.apache.lenya.cms.ac2.BypassableAccessController"
  +    role="org.apache.lenya.cms.ac2.AccessController/global">
  +  ...
  +  <public>.*[.]css|.*[.]jpg|.*[.]gif</public>
  +</component>]]></source>
  +		</section>
  +</section>
  +
   
     </body>
   </document>
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-cvs-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-cvs-help@cocoon.apache.org