an AuthorizationProvider for axis

["Pathak, Sanjesh" <Sa...@ENRON.com>]

Hi all,

I have been thinking of contributing some code to the axis project for
quite some time. I am trying to develop an authorization security
mechanism for axis. This AuthorizationProvider will be based on an xml
configuration file (see attached files). I have already written part of
the code - the code to read the configuration file and set up.

There are two methods one can invoke:

public boolean isUserAuthorizedToExecuteMethod(String serviceName,
String methodName, String userName)
and
public boolean isUserAuthorizedToAdminService(String serviceName, String
serviceAction, String userName)

(serviceAction could be "deploy" or "undeploy")

This would mean adding these two methods to SecurityProvider interface.

Later I also want to develop a GUI for providing admin service to manage
this authorization control.

Any thoughts?

Sanjesh
P.S. Although I am not as good a programmer as you all out there, I will
give it a shot and see how it works out.


**********************************************************************
This e-mail is the property of Enron Corp. and/or its relevant affiliate and may contain confidential and privileged material for the sole use of the intended recipient (s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender or reply to Enron Corp. at enron.messaging.administration@enron.com and delete all copies of the message. This e-mail (and any attachments hereto) are not intended to be an offer (or an acceptance) and do not create or evidence a binding and enforceable contract between Enron Corp. (or any of its affiliates) and the intended recipient or any other party, and may not be relied on by anyone as the basis of a contract by estoppel or otherwise. Thank you. 
**********************************************************************