Felix Meschberger  wrote
> Hi all,
> 
> For SLING-1670 [1] I have created a simple security provider for the
> Apache Felix Web Console. This provider grants access to the repository
> based on the user name and password provided.
> 
>  (1) A session is acquired for the user name and password
>  (2) If the user is one of a configurable set of users allowed
>      access, the user is granted access.
>  (3) Otherwise if the user is a member of one of a configurable
>      set of groups allowed access, the user is granted access.
> 
> If the user name and password cannot be used to login to the repository
> or the user is neither in the configured set of users nor a member of
> one of the configured groups, access is denied.
> 
> This mechanism is actually much better than the current mechanism in the
> Web Console with a single user (admin by default) configured for access.
> 
> I would like to add this to the Launchpad Builder and after that also to
> Sling 6.
> 
> Code is in the bundles/extensions/webconsolesecurityprovider [2] folder.
> 
> WDYT ?
This sounds like a good plan to me; great stuff!

What happens if the repository is not available?

Regards
Carsten
-- 
Carsten Ziegeler
[email protected]

Reply via email to