> i would be greatly interested to see how you integrated 
> acegisecurity and slide. 

I wrote an EmbeddedDomainBean which wraps Slide's EmbeddedDomain. This
allows you to setup your Slide namespace via Spring application contents,
which is nice.

I'm using the Postgres RDBMS store rather than the file system store. I
found the file system store's Lucene integration too early-stage to be
useful. Postgres' tsearch2 module works well for full text indexing. I wrote
a new adapter that uses Postgres' large objects rather than BYTEA columns,
as performance and memory consumption became issues with large files. Using
Postgres large objects works very well indeed.

Most of Slide's classes require a NamespaceAccessToken, so I wrote a
NamespaceAccessTokenFilter. This lives in a Spring context via Acegi
Security's FilterToBeanProxy. The NamespaceAccessTokenFilter simply sets a
servlet context attribute to contain the NamespaceAccessToken obtained from
the EmbeddedDomainBean.

None of the above relates to security, but as Spring users it's possibly of
interest to know how to integrate Slide into a Spring environment.

At a security level, I'm using Acegi Security's (CVS) BASIC authentication
filter and HttpSessionIntegrationFilter. The setAdditionalAttributes(List)
method is used to specify the logged on Authentication object should also be
put into HttpSession attribute "org.apache.slide.webdav.method.principal".
This is what is looked at by Slide's WebdavServlet to determine the
currently logged on user.

I'm still playing around with the optimal approach to the authentication
repository. I'll probably have Acegi Security use a
DaoAuthenticationProvider that queries Slide's  /users and /roles nodes
directly from Postgres. There are several ways to go about it, but the
"difficult" part is getting Slide to accept the Acegi Security
Authentication token (which it happily does in the configuration detailed
above).

Best regards
Ben



-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Acegisecurity-developer mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to