On Aug 20, 2010, at 4:06 AM, Felix Meschberger <[email protected]> wrote:

> Hi all,
> 
> For SLING-1670 [1] I have created a simple security provider for the
> Apache Felix Web Console. This provider grants access to the repository
> based on the user name and password provided.
> 
> (1) A session is acquired for the user name and password
> (2) If the user is one of a configurable set of users allowed
>     access, the user is granted access.
> (3) Otherwise if the user is a member of one of a configurable
>     set of groups allowed access, the user is granted access.
> 
> If the user name and password cannot be used to login to the repository
> or the user is neither in the configured set of users nor a member of
> one of the configured groups, access is denied.
> 
> This mechanism is actually much better than the current mechanism in the
> Web Console with a single user (admin by default) configured for access.

Understatement of the day!
> 
> I would like to add this to the Launchpad Builder and after that also to
> Sling 6.
> 

+1
> Code is in the bundles/extensions/webconsolesecurityprovider [2] folder.
> 
> WDYT ?
> 
> Regards
> Felix
> 
> [1] https://issues.apache.org/jira/browse/SLING-1670
> [2]
> http://svn.apache.org/repos/asf/sling/trunk/bundles/extensions/webconsolesecurityprovider

Reply via email to