[ http://team.andromda.org:8080/jira/browse/BPM-107?page=comments#action_10420 ] Wouter Zoons commented on BPM-107: ----------------------------------
I guess Chad had a good point when he spoke about the unauthenticatedIdentity, you can configure this feature in your application server's configuration and assign a username to it because, in the strictest sense I think that the <<Unsecured>> use-cases would still not be unsecured, they would be secured but completely promiscuess.. meaning everybody is authorized to access them (still within a secure context) so basically I think the best way to go is to model a specific 'guest' actor that is configured as the unauthenticatedIdentity in your app.server, security is enabled for your app or not, no grey zone. this should work, no ? > No possibilit to allow anonymous user access to a use case (when security > setting is on) > ---------------------------------------------------------------------------------------- > > Key: BPM-107 > URL: http://team.andromda.org:8080/jira/browse/BPM-107 > Project: Bpm4Struts Cartridge > Type: Bug > Reporter: Erwin Teseling > Assignee: Wouter Zoons > > > In the current version of the cartridge it is not possible to use security > and still allow for some use cases to be "unsecured" (meaning allowing an > anonymous user to have acces to this use case). > On the mailinglist there was some discussion on how to deal with this and I > agree defining a new stereotype lyke "Secured" and "Unsecured" is a good way > to deal with this. For my understanding this would mean that: > - A use case that is typed "Unsecured" with no associations with any actors > is accessible for anyone. > - A use case that is types "Unsecured" with several associations with actors > is accessible for anyone. > - A use case that is typed "Secured" with no associations with any actors is > NOT accessible by anyone. > - A user case that is typed "Secured" with several associations with actors > is ONLY accessible for those actors/roles. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://team.andromda.org:8080/jira/secure/Administrators.jspa - If you want more information on JIRA, or have a bug to report see: http://www.atlassian.com/software/jira ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ Andromda-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/andromda-devel
