RE: [VOTE] Release Apache Sling Commons Scheduler 2.4.6

2015-03-02 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Sunday, March 01, 2015 3:34 PM To: Sling Developers Subject: [VOTE] Release Apache Sling Commons Scheduler 2.4.6 Hi, We solved 1 issue in this release:

RE: [VOTE] Release Apache Sling Testing Resource Resolver Mock version 0.3.0

2014-09-25 Thread Mike Müller
+1 Best regards mike -Original Message- From: Stefan Seifert [mailto:sseif...@pro-vision.de] Sent: Thursday, September 25, 2014 11:23 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Testing Resource Resolver Mock version 0.3.0 Hi, We solved 4 issues in this

[RESULT] [VOTE] Sling Resource Access Security version 1.0.0

2014-09-20 Thread Mike Müller
Hi, The vote has passed with the following result : +1 (binding): Robert Munteanu, Carsten Ziegeler, Mike Müller I will copy this release to the Sling dist directory and promote the artifacts to the central Maven repository. Best regards mike

[VOTE] Release Apache Sling Resource Access Security version 1.0.0

2014-09-17 Thread Mike Müller
Hi, It's time to make a first release of the Resource Access Security bundle. There's a lot of test coverage and the feature set includes access controlling on all CRUD operations. Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1122/ You can use this

RE: [VOTE] Release Apache Sling Resource Access Security version 1.0.0

2014-09-17 Thread Mike Müller
+1 -Original Message- From: Mike Müller [mailto:mike...@mysign.ch] Sent: Wednesday, September 17, 2014 2:19 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Resource Access Security version 1.0.0 Hi, It's time to make a first release of the Resource Access

RE: [VOTE] Release Apache Sling Auth Core 1.3.0

2014-09-17 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, September 17, 2014 3:23 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Auth Core 1.3.0 Hi, We solved two issue:

RE: [VOTE] Release Apache Sling DavEx Access to repositories 1.2.2

2014-09-17 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Wednesday, September 17, 2014 8:34 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling DavEx Access to repositories 1.2.2 Hi, We solved 1 issue in this release:

RE: [ANN] New Apache Sling Committer: Stefan Seifert

2014-09-08 Thread Mike Müller
Welcome on board Stefan! Best regards mike -Original Message- From: Stefan Seifert [mailto:sseif...@pro-vision.de] Sent: Monday, September 08, 2014 9:21 PM To: dev@sling.apache.org Subject: RE: [ANN] New Apache Sling Committer: Stefan Seifert thank you very much! a few

RE: [VOTE] Release Apache Sling API 2.8.0, take II

2014-08-28 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, August 28, 2014 9:33 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling API 2.8.0, take II Hi, We solved 3 issues

RE: [VOTE] Release Apache Sling JSON Library 2.0.8

2014-08-26 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Monday, August 25, 2014 5:30 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling JSON Library 2.0.8 Hi, On the road for the Sling 7 release ... We solved 3 issues in

RE: [VOTE] Release Apache Sling Default POST Servlets 2.3.6

2014-08-26 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Monday, August 25, 2014 6:35 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Default POST Servlets 2.3.6 Hi, We solved 1 issue in this release:

RE: [VOTE] Sling Auth Modules

2014-08-08 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Friday, August 08, 2014 2:26 PM To: dev@sling.apache.org Subject: [VOTE] Sling Auth Modules Hi, in order to get Launchpad 7 out, this is a vote to release Auth Core 1.1.8

RE: [VOTE] Release Apache Sling Parent version 20

2014-07-29 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Tuesday, July 29, 2014 10:54 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Parent version 20 Hi, We solved 3 issues in this release:

RE: Launchpad 7 Release?

2014-07-25 Thread Mike Müller
-Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, July 23, 2014 9:22 AM To: dev@sling.apache.org Subject: Re: Launchpad 7 Release? I've updated the bundle list - it was pretty current. For three bundles we still have open issues before we can

RE: Launchpad 7 Release?

2014-07-22 Thread Mike Müller
On Tue, 2014-07-22 at 15:30 +0200, Carsten Ziegeler wrote: Looking at the snapshot list of the builder project, I guess we could just release all of them and we're got with Sling 7 and then maybe have a look at how to change things after Sling 7? +1, I think it's important to

RE: [VOTE] Release Apache Sling Scripting JSP 2.1.2 and Apache Sling Scripting Java 2.0.8

2014-07-04 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, July 02, 2014 1:51 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Scripting JSP 2.1.2 and Apache Sling Scripting Java 2.0.8 Hi, We solved two

RE: [featureflags] Readding sling:features to resourceResolver

2014-06-12 Thread Mike Müller
Hi Just my 2 cents to it: Why not defining a featureflag-interface which is internally implemented with ResourceAccessGates. Personally I think ResourceAccessGates could do the job but I can follow the fear, that such a mechanism mixing up with a security mechanism could lead to bad design. So

RE: [VOTE] Release Apache Sling Service User Mapper 1.0.2

2014-05-27 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, May 26, 2014 4:38 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Service User Mapper 1.0.2 Hi, We solved 1 issue in this release:

RE: [VOTE] Release Apache Sling Classloader Leak Detector 1.0.0

2014-05-19 Thread Mike Müller
+1 Best regards mike -Original Message- From: Chetan Mehrotra [mailto:chetan.mehro...@gmail.com] Sent: Thursday, May 15, 2014 11:38 AM To: dev Subject: [VOTE] Release Apache Sling Classloader Leak Detector 1.0.0 Hi, This is to vote for the Apache Sling Classloader Leak Detector

RE: [VOTE] Release Apache Sling Scripting JSP 2.1.0 and Apache Sling Commons Compiler 2.2.0

2014-05-19 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, May 15, 2014 2:20 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Scripting JSP 2.1.0 and Apache Sling Commons Compiler 2.2.0 Hi, this vote is about

RE: [VOTE] Release Apache Sling Bundle Archetype 1.0.2

2014-05-19 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Thursday, May 15, 2014 10:55 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Bundle Archetype 1.0.2 Hi, We solved 5 issues in this release:

RE: [VOTE] Release Apache Sling Servlet Archetype 1.0.2

2014-05-19 Thread Mike Müller
+1 Best regards mike -Original Message- From: Robert Munteanu [mailto:romb...@apache.org] Sent: Thursday, May 15, 2014 11:03 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Servlet Archetype 1.0.2 Hi, We solved 9 issues in this release:

RE: [VOTE] Release Apache Sling Servlets Resolver 2.3.2

2014-03-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, March 27, 2014 1:03 PM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling Servlets Resolver 2.3.2 Anyone else? 2014-03-24 20:26 GMT+01:00 Oliver Lietz

RE: [VOTE] Release Apache Sling Installer Factory Configuration 1.0.12

2014-03-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, March 27, 2014 1:03 PM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling Installer Factory Configuration 1.0.12 Anyone else? 2014-03-24 10:56

RE: [VOTE] Release Apache Sling Servlets Get 2.1.8

2014-03-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, March 27, 2014 1:04 PM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling Servlets Get 2.1.8 Anyone else? 2014-03-24 20:26 GMT+01:00 Oliver Lietz

RE: [VOTE] Release Apache Sling Parent POM 19

2014-03-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, March 27, 2014 1:04 PM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling Parent POM 19 Anyone else? 2014-03-24 14:33 GMT+01:00 Carsten Ziegeler

RE: [VOTE] Release Apache Sling Resource Resolver 1.1.0

2014-03-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, March 31, 2014 2:25 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Resource Resolver 1.1.0 Hi, We solved 17 issues in this release:

RE: [RT] Make ResourceAccessSecurity always restrict access if installed and no ResourceAccessGate present

2014-03-18 Thread Mike Müller
2014-03-17 8:38 GMT-07:00 Mike Müller mike...@mysign.ch: Hi I think this is insecure by design and not correct: The problem is not, that we do grant access if no ResourceAccessGate is registered for application context. The problem is, that we grant access also

RE: [RT] Make ResourceAccessSecurity always restrict access if installed and no ResourceAccessGate present

2014-03-18 Thread Mike Müller
From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Subject: Re: [RT] Make ResourceAccessSecurity always restrict access if installed and no ResourceAccessGate present Hi, On Tue, Mar 18, 2014 at 8:48 AM, Mike Müller mike...@mysign.ch wrote: ... Maybe it would make sense to rename

RE: [RT] Make ResourceAccessSecurity always restrict access if installed and no ResourceAccessGate present

2014-03-18 Thread Mike Müller
...snipsnap Ok, I see your point and yes, partially this is related to the name DONTCARE. I'm fine with renaming it to CANTDECIDE and then implementing it the way you suggest :) Regards Carsten Okay, created SLING-3462. Best regards mike

[RT] Make ResourceAccessSecurity always restrict access if installed and no ResourceAccessGate present

2014-03-16 Thread Mike Müller
Hi As I worked on SLING-3435 [1] and added some more tests I noticed that Even if resourceaccesssecurity is installed as a bundle the two implementing classes ApplicationResourceAccessSecurityImpl (for application context) and ProviderResourceAccessSecurityImpl (for provider context) are only

RE: [VOTE] Release Apache Sling Engine 2.3.2

2014-03-15 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, March 11, 2014 2:39 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Engine 2.3.2 Hi, this vote is about the release of Apache Sling Engine 2.3.2

RE: [VOTE] Release Apache Sling Resource Merger 1.0.0

2014-02-21 Thread Mike Müller
+1 Checked sigantures Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, February 18, 2014 11:37 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Resource Merger 1.0.0 Hi, this vote is about the first

RE: [VOTE] Release Apache Sling Servlets Resolver 2.3.0

2014-02-21 Thread Mike Müller
+1 Checked sigantures Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, February 18, 2014 1:40 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Servlets Resolver 2.3.0 Hi, this vote is about the release of

RE: [VOTE] Apache Sling Event 3.3.4

2014-01-22 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, January 21, 2014 8:45 PM To: dev@sling.apache.org Subject: [VOTE] Apache Sling Event 3.3.4 Hi, I just discovery a regression bug in the eventing (SLING-3329). Therefore I

RE: [VOTE] Release Apache Sling Event 3.3.2

2014-01-17 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, January 15, 2014 5:15 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Event 3.3.2 Hi, its time for a new Sling event release.

RE: [VOTE] Release Apache Sling Installer Core 3.5.0

2014-01-17 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, January 15, 2014 4:56 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Installer Core 3.5.0 Hi, its time for a new installer core release.

RE: Reconsidering when to apply resource access security

2014-01-15 Thread Mike Müller
Hi In the hope not to raise dust again... ResourceAccessGate could really help to harden existing Sling applications even if they use JCR only as backend. As mentioned many times before ResourceAccessGate does not interfere or cancel other ACLs like these from JCR and it is not a substitution of

RE: Reconsidering when to apply resource access security

2014-01-15 Thread Mike Müller
Although this seems to be another compromise, it has advantages to the actual flag which must be set on every provider. Sorry to say it again, but no configuration would be easier and logical. The writer of the ResourceAccessGate can decide anyway on which Resource he will apply rules or not.

RE: Reconsidering when to apply resource access security

2014-01-15 Thread Mike Müller
...@apache.org] Sent: Wednesday, January 15, 2014 10:12 AM To: dev Subject: Re: Reconsidering when to apply resource access security Hi Mike, On Wed, Jan 15, 2014 at 10:02 AM, Mike Müller mike...@mysign.ch wrote: ...I think if someone like to use ResourceAccessGate it should be as easy

RE: Reconsidering when to apply resource access security

2014-01-13 Thread Mike Müller
+1 That would be more consistent. Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, January 13, 2014 2:24 PM To: dev@sling.apache.org Subject: Reconsidering when to apply resource access security Hi, after long discussions

RE: [OT] Feature flag influence on Resource access (Was: FYI: feature flags prototype)

2013-12-06 Thread Mike Müller
Hi I'm not sure if it is a good idea that a ResourceDecorator could return null. IMHO it's not what someone would expect from a Decorator. All the more that decorator is the name of a well known pattern, which would never be a null object (only a null object could be decorated but not vice

RE: [VOTE] Release Apache Sling discovery.impl 1.0.2

2013-11-29 Thread Mike Müller
+1 best regards mike -Original Message- From: Stefan Egli [mailto:e...@adobe.com] Sent: Wednesday, November 27, 2013 3:03 PM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling discovery.impl 1.0.2 Hi Ian, It should be there now. (It was 'in the pipeline

RE: [VOTE] Release Apache Sling org.apache.sling.commons.testing 2.0.16

2013-11-26 Thread Mike Müller
+1 Best regards mike -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Tuesday, November 19, 2013 5:28 PM To: dev Subject: [VOTE] Release Apache Sling org.apache.sling.commons.testing 2.0.16 Hi, We solved 5 issues in this release:

RE: FYI: feature flags prototype

2013-11-14 Thread Mike Müller
To confirm what Dominik mentioned: The existing ResourceAccessGate would allow to grant or deny access to resources. IMHO there's no need to implement another interface or hook to achieve what is requested in the perspective of granting or denying access to resources based on feature flag. Just

RE: FYI: feature flags prototype

2013-11-14 Thread Mike Müller
On Thu, Nov 14, 2013 at 2:35 PM, Felix Meschberger fmesc...@adobe.comwrote: Hi Sure you can do it, but it (a) doesn’t match the idea of an access gate (at least not in my little brain cells) and (b) it is not comprehensive since the JCR Resource Provider does not leverage that. (b)

RE: [ANN] please welcome Chetan Mehrotra as a Sling committer!

2013-11-01 Thread Mike Müller
A warm welcome to the Sling committer team! Best regards mike -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Thursday, October 31, 2013 9:41 AM To: dev Subject: [ANN] please welcome Chetan Mehrotra as a Sling committer! Hi, Based on his

RE: [VOTE] Release Apache Sling Web Console Security Provider 1.1.0

2013-10-28 Thread Mike Müller
1+ sorry for being late... best regards Mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, October 28, 2013 9:30 AM To: dev@sling.apache.org Subject: Re: [VOTE] Release Apache Sling Web Console Security Provider 1.1.0 Anyone else? Thanks

RE: [VOTE] Release Apache Sling Commons Scheduler 2.4.2, Commons Threads 3.2.0, and Evenint 3.3.0

2013-10-22 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Sunday, October 20, 2013 4:16 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Commons Scheduler 2.4.2, Commons Threads 3.2.0, and Evenint 3.3.0 Hi, it's time

RE: [VOTE] Release Apache Sling Health Check Core 1.0.6, Health Check JMX 1.0.6, and JMX Resource Provider 0.6.0

2013-10-22 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Sunday, October 20, 2013 4:18 PM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Health Check Core 1.0.6, Health Check JMX 1.0.6, and JMX Resource Provider 0.6.0 Hi,

RE: [VOTE] Initial Release of the Apache Sling Health Check Tools

2013-09-26 Thread Mike Müller
+1, cool tools ;-) Best regards mike -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Thursday, September 26, 2013 5:39 PM To: dev Subject: [VOTE] Initial Release of the Apache Sling Health Check Tools Hi, This is a vote for the initial release

RE: [VOTE] Drop the time zone info from committers page

2013-09-18 Thread Mike Müller
+1 Best regards mike -Original Message- From: Felix Meschberger [mailto:fmesc...@adobe.com] Sent: Wednesday, September 18, 2013 10:00 AM To: dev@sling.apache.org Subject: Re: [VOTE] Drop the time zone info from committers page +1 Regards Felix Am 17.09.2013 um 19:33 schrieb

RE: [DISCUSS] move healthcheck under bundles/extensions and release as 0.9.0

2013-09-17 Thread Mike Müller
+1 for releasing it as 1.0.0 as the API seems tob e pretty stable. Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, September 17, 2013 4:04 PM To: dev@sling.apache.org Subject: Re: [DISCUSS] move healthcheck under

RE: [GSoC2013] Access Control for Cassandra ResourceProvider

2013-09-12 Thread Mike Müller
Hi The common way to solve such an access control for a provider like the Cassandra resource provider is the new ResourceAccessSecurity service. This is implemented in the bundle resourceaccesssecurity (at this time only read rights will be checked). All you have to do is to implement the SPI

RE: [GSoC2013] Access Control for Cassandra ResourceProvider

2013-09-12 Thread Mike Müller
From: ianbos...@gmail.com [mailto:ianbos...@gmail.com] On Behalf Of Ian Boston Hi Mike, Thanks for the pointer. On 12 September 2013 14:58, Mike Müller mike...@mysign.ch wrote: Hi The common way to solve such an access control for a provider like the Cassandra resource provider

RE: [VOTE] Parent POM 18

2013-09-03 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, September 03, 2013 8:20 AM To: dev@sling.apache.org Subject: [VOTE] Parent POM 18 Hi, please vote for a release of our parent pom, it basically contains updates of the

RE: [VOTE] Apache Commons Log 3.0.2

2013-08-26 Thread Mike Müller
+1 best regards mike -Original Message- From: Felix Meschberger [mailto:fmesc...@adobe.com] Sent: Monday, August 26, 2013 10:11 AM To: dev@sling.apache.org Subject: [VOTE] Apache Commons Log 3.0.2 Hi This is to vote for the Apache Commons Log 3.0.2 release. This is probably

RE: [VOTE] Release Discovery Modules, Settings and Eventing

2013-08-09 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Friday, August 09, 2013 9:52 AM To: dev@sling.apache.org Subject: [VOTE] Release Discovery Modules, Settings and Eventing Hi, this vote is primarily about doing the first release

RE: [VOTE] release org.apache.sling.auth.form version 1.0.4

2013-05-27 Thread Mike Müller
+1 best regards mike -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Friday, May 24, 2013 12:06 PM To: dev Subject: [VOTE] release org.apache.sling.auth.form version 1.0.4 Hi, We solved 3 issues in this release:

RE: [VOTE] JCR Resource 2.2.8 and Servlets Post 2.3.0

2013-05-09 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Friday, May 03, 2013 12:51 PM To: dev@sling.apache.org Subject: [VOTE] JCR Resource 2.2.8 and Servlets Post 2.3.0 Hi, we have some important bug fixes and improvements to release.

RE: [VOTE] Release parent 16

2013-04-30 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, April 30, 2013 11:58 AM To: dev@sling.apache.org Subject: [VOTE] Release parent 16 Please vote for the release of a new parent pom. This contains a single change, the

RE: [VOTE] Release API 2.4.2

2013-04-30 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, April 30, 2013 10:16 AM To: dev@sling.apache.org Subject: [VOTE] Release API 2.4.2 Hi, I just fixed two errors in ResourceUtil (SLING-2844 and SLING-2845) which imho

RE: [ANN] New Committer : Stefan Egli

2013-04-24 Thread Mike Müller
Welcome and congrats Stefan! best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Tuesday, April 23, 2013 8:57 AM To: dev@sling.apache.org Subject: [ANN] New Committer : Stefan Egli The Project Management Committee (PMC) for Apache

RE: [ANN] Please welcome Dan Klco as a Sling committer

2013-04-24 Thread Mike Müller
Welcome and congrats Dan! best regards mike -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Tuesday, April 23, 2013 10:03 AM To: dev Subject: [ANN] Please welcome Dan Klco as a Sling committer Hi, Based on his ongoing and valuable

RE: [VOTE] Release Apache Sling Security 1.0.4

2013-04-22 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, April 22, 2013 10:14 AM To: dev@sling.apache.org Subject: [VOTE] Release Apache Sling Security 1.0.4 Hi, this vote is about a fix in the security module (SLING-2836) So

RE: [VOTE] Release Testing ResourceResolver Mock 0.1.0

2013-04-18 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, April 18, 2013 8:14 AM To: dev@sling.apache.org Subject: [VOTE] Release Testing ResourceResolver Mock 0.1.0 Hi, this vote is about a first release of our new Testing

RE: Feedback on the current ResourceAccessSecurity API

2013-04-04 Thread Mike Müller
AM To: dev@sling.apache.org Subject: Re: Feedback on the current ResourceAccessSecurity API Hi Mike, On Wed, Apr 3, 2013 at 9:18 PM, Mike Müller mike...@mysign.ch wrote: ...I commited a last shot of the SPI API. The Sling API hasn't changed anymore. I think the API is now complete

RE: Feedback on the current ResourceAccessSecurity API

2013-04-03 Thread Mike Müller
I commited a last shot of the SPI API. The Sling API hasn't changed anymore. I think the API is now complete and after all the discussions enough mature. best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, April 03, 2013 1:48 PM

RE: Feedback on the current ResourceAccessSecurity API

2013-03-27 Thread Mike Müller
It's not really an optimization in the sense of a QueryOptimizer, that could be done by every ResourceProvider by now, without any new API. The sanitizeQuery functionality has to come with the ResourceAccessSecurity service: The query can be injected (sanitized) only from a service

RE: Feedback on the current ResourceAccessSecurity API

2013-03-27 Thread Mike Müller
So it is optimizeQuery really ;-) -Bertrand optimizeQuery in matters of performant security checks :-) Maybe you are right in this case, that we rather should name the method optimizeQuery than sanitizeQuery. mike

RE: Feedback on the current ResourceAccessSecurity API

2013-03-27 Thread Mike Müller
+1 -Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Wednesday, March 27, 2013 5:53 PM To: dev@sling.apache.org Subject: Re: Feedback on the current ResourceAccessSecurity API On Wed, Mar 27, 2013 at 5:48 PM, Carsten Ziegeler cziege...@apache.org

RE: Feedback on the current ResourceAccessSecurity API

2013-03-25 Thread Mike Müller
Notes on ResourceAccessSecurity: 1) javadocs says * - Expected to only be implemented once in the framework/application..., I'm not sure about that. If you have both a filesystem and an HBase resource providers, they might use very different implementations? 2) Notes as comments in the

RE: [RT] ResourceAccessSecurity service for ResourceProvider without ACLs

2013-03-24 Thread Mike Müller
-Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Sunday, March 24, 2013 2:10 PM To: dev@sling.apache.org Subject: Re: [RT] ResourceAccessSecurity service for ResourceProvider without ACLs 2013/3/24 Mike Müller mike...@mysign.ch: From: Carsten

[RT] ResourceAccessSecurity service for ResourceProvider without ACLs

2013-03-21 Thread Mike Müller
Hi I'm coming up with a new thread concerning the use of the new ResourceAccessSecurity service in implementations of ResourceProvider which do not have uderlaying ACLs. My first thought was that each ResourceProvider without any ACLs should implement some lightweight access security through the

RE: [RT] Access Control in ResourceProviders

2013-03-12 Thread Mike Müller
From: Felix Meschberger [mailto:fmesc...@adobe.com] Okay, as far as I understand we've got the consensus of separating my access gate proposal from the Sling API. We should have something like a ResourceAccessSecurity service in a extension bundle, I think we can keep the basic

RE: [RT] Access Control in ResourceProviders

2013-03-12 Thread Mike Müller
Hi To be sure (and save some time coding ;-) ), I sum up our discussion: We can keep the basic singleton service (ResourceAccessSecurity) in the API and document it like this: * Expected to only be implemented once in the framework/application (much like the OSGi LogService or

RE: [RT] Access Control in ResourceProviders

2013-03-11 Thread Mike Müller
Hi Okay, as far as I understand we've got the consensus of separating my access gate proposal from the Sling API. We should have something like a ResourceAccessSecurity service in a extension bundle, I think we don't loose the goal of bringing Sling forward to a frontend of resources from

RE: [RT] ResourceProviderDecorator

2013-03-07 Thread Mike Müller
Sorry for asking a stupid question, but why would a ResourceProvider that delivered resources subject to security, not implement it that security and cover the use cases required as a part of its implementation ? 1 Allowing insecure ResourceProviders to exist with the intention of

RE: ResourceAccessGate (SLING-2698)

2013-03-06 Thread Mike Müller
Just to throw in some more ideas :) what about a decorator for resource providers? This would also solve the use case of easily adding additional checks to resource providers who don't have their own access checks without needing to code this into each and every provider. And a

RE: ResourceAccessGate (SLING-2698)

2013-03-06 Thread Mike Müller
Many modern stores do not provide any security, they're just stupid key-value or column stores. How about being able to promote Sling + HBase as a scalable web framework, for example? How about Sling as web layer for Solr? That would be very cool IMO, and if you want ACLs in such a setup

RE: ResourceAccessGate (SLING-2698)

2013-03-06 Thread Mike Müller
On Wed, Mar 6, 2013 at 4:32 PM, Mike Müller mike...@mysign.ch wrote: ...A ResourceProviderDecorator couldn't do the job, because some operations are on the ResourceResolver at the moment (delete, create but also findResources and queryResources) Does that indicate that those

RE: ResourceAccessGate (SLING-2698)

2013-03-06 Thread Mike Müller
2013/3/6 Mike Müller mike...@mysign.ch: Just to throw in some more ideas :) what about a decorator for resource providers? This would also solve the use case of easily adding additional checks to resource providers who don't have their own access checks without needing to code

RE: [VOTE] Apache Sling Launchpad Base 2.5.0 and Apache Sling Scripting Console 1.0.0

2013-03-03 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Wednesday, February 27, 2013 11:28 AM To: dev@sling.apache.org Subject: [VOTE] Apache Sling Launchpad Base 2.5.0 and Apache Sling Scripting Console 1.0.0 Hi, this vote is about a

RE: [VOTE] Drop Java 5 Support in General

2013-01-31 Thread Mike Müller
+1 Best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Thursday, January 31, 2013 5:48 PM To: dev@sling.apache.org Subject: [VOTE] Drop Java 5 Support in General Hi, we see more and more problems with supporting Java 5 and we

RE: [VOTE] Five New Releases

2012-12-17 Thread Mike Müller
+1 best regards Mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Saturday, December 15, 2012 4:16 PM To: dev@sling.apache.org Subject: [VOTE] Five New Releases Hi, This vote is about five new releases Parent 14

RE: [VOTE] Release Sling Servlet Resolver 2.2.2

2012-12-07 Thread Mike Müller
+1 best regards mike -Original Message- From: Felix Meschberger [mailto:fmesc...@adobe.com] Sent: Wednesday, December 05, 2012 3:17 PM To: dev@sling.apache.org Subject: [VOTE] Release Sling Servlet Resolver 2.2.2 Hi I would like to call a vote on the Sling Servlet Resolver

RE: [VOTE] Release Commons OSGi, Settings, Rewriter, Launchpad Installer and Maven Launchpad Plugin

2012-11-19 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Friday, November 16, 2012 9:32 AM To: dev@sling.apache.org Subject: [VOTE] Release Commons OSGi, Settings, Rewriter, Launchpad Installer and Maven Launchpad Plugin Hi, This vote

RE: [VOTE] New API and related bundles

2012-11-15 Thread Mike Müller
+1 proved the signatures... best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, November 12, 2012 11:27 AM To: dev@sling.apache.org Subject: [VOTE] New API and related bundles Hi, This vote is about ten modules in total

Integration tests fail because of SLING-2645

2012-11-02 Thread Mike Müller
Hi The integration tests now fail, because the SortingServiceTracker could not be found in the released version of commons/osgi. Am I correct, that the only way to correct this is to release Commons OSGi bundle in 2.1.2. Or are there any alternative ways to make the tests run again? best

RE: Integration tests fail because of SLING-2645

2012-11-02 Thread Mike Müller
On Fri, Nov 2, 2012 at 10:06 AM, Mike Müller mike...@mysign.ch wrote: ...The integration tests now fail, because the SortingServiceTracker could not be found in the released version of commons/osgi. Am I correct, that the only way to correct this is to release Commons OSGi bundle

RE: Integration tests fail because of SLING-2645

2012-11-02 Thread Mike Müller
I haven't followed all the changes, but so far the installer did inline the classes from OSGi commons. Maybe this new class needs to be added to be inlined? Carsten 2012/11/2 Bertrand Delacretaz bdelacre...@apache.org: On Fri, Nov 2, 2012 at 11:21 AM, Mike Müller mike...@mysign.ch wrote

RE: Integration tests fail because of SLING-2645

2012-11-02 Thread Mike Müller
Carsten, looked at the wrong thing... ;-) best regards mike 2012/11/2 Mike Müller mike...@mysign.ch: I haven't followed all the changes, but so far the installer did inline the classes from OSGi commons. Maybe this new class needs to be added to be inlined? Carsten 2012/11/2 Bertrand

RE: [DISCUSS] Proposal for a minimal access gate on resource level

2012-10-30 Thread Mike Müller
if someone implements a ResourceAccessGateService. The proposal only suggest a new service interface which can be implemented by a user of sling or not. In the case of not using this service, nothing changes from an API-view. On 26.10.2012, at 10:43, Mike Müller mike...@mysign.ch wrote: Okay

[DISCUSS] Proposal for a minimal access gate on resource level

2012-10-26 Thread Mike Müller
Hi The main goal of this proposal is to provide a easy to use service in Sling to restrict (or grant) access to resources for special use cases (like giving access to some resources only between 8am and 5pm). The service should be very lightweight and should NOT be a replacement of ACLs - and of

RE: [VOTE] Release Scripting JST 2.0.6

2012-08-14 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, August 13, 2012 9:46 AM To: dev@sling.apache.org Subject: [VOTE] Release Scripting JST 2.0.6 Hi, This vote is the release of Apache Sling Scripting JST 2.0.6 which fixes

RE: [RT] API for modifying resources

2012-07-31 Thread Mike Müller
Hi, I'm currently working on CRUD support for Sling based on the resource API. Current trunk contains already a version of it. I'm wondering what the best api for modifying resources is. Right now, the idea is to adapt a resource to ModifiableValueMap which is an extension of the

RE: [RT] API for modifying resources

2012-07-31 Thread Mike Müller
-Original Message- From: Bertrand Delacretaz [mailto:bdelacre...@apache.org] Sent: Tuesday, July 31, 2012 9:54 AM To: dev@sling.apache.org Subject: Re: [RT] API for modifying resources On Tue, Jul 31, 2012 at 9:48 AM, Mike Müller mike...@mysign.ch wrote: ...that's what I meant

RE: [RT] API for modifying resources

2012-07-30 Thread Mike Müller
A little bit late... I find it quite natural to first set the changes with put and remove and after that call update to make the changes persistent. That's very similar to how OR mappers or also JCR with the session works. But if I get you right, after the call of update on the

RE: [RT] API for modifying resources

2012-07-29 Thread Mike Müller
Hi A little bit late... I find it quite natural to first set the changes with put and remove and after that call update to make the changes persistent. That's very similar to how OR mappers or also JCR with the session works. But if I get you right, after the call of update on the

RE: [VOTE] New Releases

2012-06-27 Thread Mike Müller
+1 best regards mike -Original Message- From: Carsten Ziegeler [mailto:cziege...@apache.org] Sent: Monday, June 25, 2012 4:13 PM To: dev@sling.apache.org Subject: [VOTE] New Releases Hi, This vote is about seven new releases where each release contains an important fix.

  1   2   3   >