You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tapestry.apache.org by Taha Hafeez <ta...@gmail.com> on 2010/10/22 12:45:11 UTC
Tapestry's own security module
Hi,
Just curious (It may end up as a foolish question!) .... why don't we have a
tapestry-security module which is generic and can have plugins like shino or
spring-security or a simple role based model.... ?
This will make security pluggable.
We can have tapestry specific authorizations
@AuthorizeComponent({"deny=principal:someone", "admin,user"},
unauthorizeAction={DISABLE|HIDE|AUTHORIZE|RENDER_READONLY})
@AuthorizeEvent
@Authorize....
regards
Taha
Re: Tapestry's own security module
Posted by "Thiago H. de Paula Figueiredo" <th...@gmail.com>.
On Fri, 22 Oct 2010 10:26:11 -0200, Taha Hafeez <ta...@gmail.com>
wrote:
> Actually I had already read the article. But then this argument is not
> applicable to security alone...
We're discussing security. :)
> what we generally do is take the generalizations together and create a
> module... right ?
I don't think so. Trying to do everything at the same time almost never
ends with something with good quality. I have one security package and so
does ChenilleKit. Both have different models that couldn't be merged
without creating a very ugly, hard to use and understand Frankenstein.
--
Thiago H. de Paula Figueiredo
Independent Java, Apache Tapestry 5 and Hibernate consultant, developer,
and instructor
Owner, Ars Machina Tecnologia da Informação Ltda.
http://www.arsmachina.com.br
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org
For additional commands, e-mail: users-help@tapestry.apache.org
Re: Tapestry's own security module
Posted by Taha Hafeez <ta...@gmail.com>.
Actually I had already read the article. But then this argument is not
applicable to security alone...
what we generally do is take the generalizations together and create a
module... right ?
taha
On Fri, Oct 22, 2010 at 5:45 PM, Thiago H. de Paula Figueiredo <
thiagohp@gmail.com> wrote:
> On Fri, 22 Oct 2010 08:45:11 -0200, Taha Hafeez <ta...@gmail.com>
> wrote:
>
> Hi,
>>
>
> Hi!
>
> Just curious (It may end up as a foolish question!) .... why don't we have
>> a tapestry-security module which is generic and can have plugins like shino
>> or spring-security or a simple role based model.... ?
>>
>
> Not a foolish question at all. It was even asked before in this list. :)
>
> Short answer: there's no single model that covers all the situations.
> Long answer: read this discussion:
> http://tapestry.1045711.n5.nabble.com/Tapestry-Central-Securing-Tapestry-pages-with-Annotations-Part-1-td2400516.html#a2400534
>
> --
> Thiago H. de Paula Figueiredo
> Independent Java, Apache Tapestry 5 and Hibernate consultant, developer,
> and instructor
> Owner, Ars Machina Tecnologia da Informação Ltda.
> http://www.arsmachina.com.br
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: users-help@tapestry.apache.org
>
>
Re: Tapestry's own security module
Posted by "Thiago H. de Paula Figueiredo" <th...@gmail.com>.
On Fri, 22 Oct 2010 08:45:11 -0200, Taha Hafeez <ta...@gmail.com>
wrote:
> Hi,
Hi!
> Just curious (It may end up as a foolish question!) .... why don't we
> have a tapestry-security module which is generic and can have plugins
> like shino or spring-security or a simple role based model.... ?
Not a foolish question at all. It was even asked before in this list. :)
Short answer: there's no single model that covers all the situations.
Long answer: read this discussion:
http://tapestry.1045711.n5.nabble.com/Tapestry-Central-Securing-Tapestry-pages-with-Annotations-Part-1-td2400516.html#a2400534
--
Thiago H. de Paula Figueiredo
Independent Java, Apache Tapestry 5 and Hibernate consultant, developer,
and instructor
Owner, Ars Machina Tecnologia da Informação Ltda.
http://www.arsmachina.com.br
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org
For additional commands, e-mail: users-help@tapestry.apache.org