Here is some thing I observed with default scenarios.

The first for scenarios are named as

UserNameToken
Non repudiation
Integrity
Confidentiality

But this should be

Authentication - UserNameToken
Authentication - Signature verification
Non repudiation
Integrity
Confidentiality

UserNameToken is a ws-security thing rather than a generic security concept.


Further When we try to use the UT it let me to assign roles to the service.
But authorization is a different aspect. For an example
we should be able to authorize users, even if they use basic authentication
or carbon authentication.

So I think it is better to add that to main menu as well.

Authentication - UserNameToken
Authentication - Signature verification
Non repudiation
Integrity
Confidentiality
Authorization

Once the user selects the Authorization option it should let users to assign
roles at the service level or operation level.

thanks,
Amila.





On Sat, Feb 19, 2011 at 11:50 AM, Thilina Buddhika <[email protected]>wrote:

> It is available just below the default security scenarios.
>
> Btw, this is available since Carbon 3.1.0.
>
> Thanks,
> Thilina
>
> On Sat, Feb 19, 2011 at 11:38 AM, Samisa Abeysinghe <[email protected]>wrote:
>
>> How do I do this?
>>
>> In the service management UI, $subject is not possible with security QoS
>> configuration. Only default policies can be applied.
>>
>> Thanks,
>> Samisa...
>>
>> Samisa Abeysinghe
>> VP Engineering
>> WSO2 Inc.
>> http://wso2.com
>> http://wso2.org
>>
>>
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
>
> --
> Thilina Buddhika
> Senior Software Engineer
>
> WSO2 Inc. ; http://wso2.com
> lean . enterprise . middleware
>
> phone : +94 77 44 88 727
> blog : http://blog.thilinamb.com
>
> _______________________________________________
> Carbon-dev mailing list
> [email protected]
> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>
>
_______________________________________________
Carbon-dev mailing list
[email protected]
http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to