this sounds interesting, having been submersed in Flex recently though I have been learning the merits of JAAS in J2EE. Since CF is a J2EE app, we should be able to use JAAS. This would seperate the security stuffs from a CF app completely. JAAS uses the J2EE container to authenticate and authorise a user and is setup in a pluggable manner already.
Now how to actually use this via CF? Could write a CFC that interfaces with the Java httpsession to get the user principal and list of roles a user is in I suppose. something to chew on while I'm at MAX....of to some Flex training DK On 10/14/05, Robert Munn <[EMAIL PROTECTED]> wrote: > Your question brings up a question I have been thinking about for some time. > At various times over the years I have used and integrated third party > components (like calendaring) and applications into my solutions. The two > biggest stumbling blocks are always the same: > > 1. Apps written in their own frameworks, no framework, etc. That's fine for > black-box code but not for something you may need to modify. > > 2. Full blown apps use their own user and security models, so plugging them > into an existing application tends to mean either integrating at the database > layer or bolting on something external. > > These problems are hardly unique to CF or even Web development. A common > solution in enterprise apps is to bolt everything to LDAP/Active Directory, > but that is hardly ever used with externally facing apps. > > My question is, does anyone have an interest in building a pluggable > application architecture around a common identity management system, or has > anyone seen something like this for CF or other dev. platforms (other than > LDAP)? Or is LDAP being used externally now? > > The basic idea would be to build an identity management system that could > link into a pluggable application architecture. The whole system could be > exposed through a Web services API that would allow you to register any third > party app as a client of the identity management system. Adapters could be > built to link into data providers like LDAP servers if that is desirable > functionality. > > Thoughts? > > Rob > > > >For some time now, Vivio Technologies has been debating whether or not > >to put forth the effort to complete the development of a completely > >free, (under a modified open-source MIT license) CFML calendar > >application. The idea was to develop a calendar application that anyone > >could do anything they want with, and help support the Cold Fusion > >community as a whole. Companies who develop in CFML would have the > >ability to -re-design, re-code, -re-brand, re-sell, or whatever else > >they wanted to do with the calendar application. The calendar would be > >able to run under BlueDragon FREE edition, and use open-source databases > >like PostgreSQL and MySQL. That way, no user anywhere would need to pay > >for anything more then the cost of hosting in order to deploy the calendar. > > > >Our question is simple: Would there be any interest in something like this? > > > >If there is significant interest, Vivio Technologies will make the > >investment to complete the project and deliver the calendar. If there is > >only a small amount of interest, then we'll quit wasting our time > >debating over this project and move on to projects which are of more > >value to us and/or the community. > > > >Please take a moment to visit our current calendar site located at the > >following URL: > > > >http://calendar.viviotech.net/ > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:221154 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
