Hi all,
For SLING-1670 [1] I have created a simple security provider for the
Apache Felix Web Console. This provider grants access to the repository
based on the user name and password provided.
(1) A session is acquired for the user name and password
(2) If the user is one of a configurable set of users allowed
access, the user is granted access.
(3) Otherwise if the user is a member of one of a configurable
set of groups allowed access, the user is granted access.
If the user name and password cannot be used to login to the repository
or the user is neither in the configured set of users nor a member of
one of the configured groups, access is denied.
This mechanism is actually much better than the current mechanism in the
Web Console with a single user (admin by default) configured for access.
I would like to add this to the Launchpad Builder and after that also to
Sling 6.
Code is in the bundles/extensions/webconsolesecurityprovider [2] folder.
WDYT ?
Regards
Felix
[1] https://issues.apache.org/jira/browse/SLING-1670
[2]
http://svn.apache.org/repos/asf/sling/trunk/bundles/extensions/webconsolesecurityprovider
