DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42952>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42952





------- Additional Comments From [EMAIL PROTECTED]  2007-08-08 03:39 -------
(In reply to comment #19)
> I'm +1 for applying the patch.

thanks for your feedback. i'm waiting another day for comments and will apply
the patch tomorrow if nobody objects. 
 
> But we could rename the PolicyAuthorizer to PolicyRoleResolver, which would 
> make
> it obvious that it doesn't make an authorization decision, but only resolves 
> the
> roles. It would then be removed from the authorization chain and called 
> directly
> by the AccessController, which would probably sufficient to resolve bug 43049.
WDYT?

sound like a good idea to me, and yes, i agree this would resolve 43049. plus it
has the added bonus of simplifying the configuration. could you take on this
job? i'm still not feeling too comfortable with the ac code, and refactoring
probably requires more insight than fixing small bugs...


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to