I took a look at that and its not really an integration of XACML into
Acegi, its just using Acegi to get the username, all of the XACML
stuff is in the Securent product. It also looks overly complex for
what it's doing, the integration point is here:
private String getUserName() {
String userName = "anonymous";
Authentication authentication =
SecurityContextHolder.getContext().getAuthentication();
if (authentication != null) {
Object principal = authentication.getPrincipal();
if (principal instanceof
org.acegisecurity.userdetails.User) {
User user = (User) principal;
userName = user.getUsername();
} else {
userName = principal.toString();
}
}
return userName;
}
which can be done without mentioning Acegi at all:
private String getUserName() {
// intermediate variables are for the weak ;)
String userName =
FacesContext.getCurrentInstance().getExternalContext().getRemoteUser();
return userName == null ? "anonymous" : username;
}
Just my 2c
Baz
On 9/8/06, McGovern, James F (HTSC, IT) <[EMAIL PROTECTED]> wrote:
> I googled a guy named Rick Hightower who incorporated XACML into ACEGI using
> the Securent (www.securent.net) product. Does it make sense for this to make
> it into the main stream?
>
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
