On Tue, Jun 3, 2008 at 10:55 PM, Andy Thomson <[EMAIL PROTECTED]> wrote: > Niklas, > > What do you think about making User more basic, ie, more abstract, having > only one method such as getEnabled(). Then push everything else up higher, > like the Authority[]. This way we can allow other User-code styles that may > not use the those mappings or approaches. In other words keep the interface > very basic.
Not to detract from this discussion, but my plan is to propose that we rip out our home-grown security design and replace it with JSecurity (http://www.jsecurity.org). The project is currently being voted for incubation at Apache and I think it would be a perfect fit for FtpServer. In that case, the current User interface would be replaced by the Subject interface: http://www.jsecurity.org/api/org/jsecurity/subject/Subject.html What's your thoughts on this? /niklas
