On Thu, Mar 21, 2013 at 4:36 PM, Afkham Azeez <[email protected]> wrote:
> > > On Thu, Mar 21, 2013 at 4:26 PM, Sagara Gunathunga <[email protected]>wrote: > >> >> >> On Thu, Mar 21, 2013 at 3:35 PM, Afkham Azeez <[email protected]> wrote: >> >>> With the worker-manager concept, we no longer require FE-BE separation. >>> There is no need to have FE-BE separation for the management node. So, I >>> think we can completely do away with that concept. >>> >>> What do you guys think? >>> >> >> Great +1 !! >> >> In fact I also wanted to bring this idea, right now maintaining FE-BE is >> a extra overhead and having very little usage. Instead we should call >> relevant BE services directly from JSPs/Web FEs without going through any >> WS layer in other word should be a java-to-java communication. >> > > The only major issue which we will have to fix is the authentication & > authorization mechanism. We have heavily relied on the Axis2 handler > architecture to do this. In fact, our FEs are not that secure, it is only > at the BE that we ensure strong security (authz), so when we fuse the two > together, the authz model will have to br properly thought through. > Basically our Carbon Admin is a web app run on tomcat hence naturally we should able to provide authentication & authorization through kind of Web app Filter without using Axis2 stuff. In C5 there will be no Axis2 hence we need to invent a new security model for Carbon admin console. It seems Servlet Filter (may be valve ) model work here. Thanks ! > > Azeez > > >> >> Thanks ! >> >>> >>> -- >>> *Afkham Azeez* >>> Director of Architecture; WSO2, Inc.; http://wso2.com >>> Member; Apache Software Foundation; http://www.apache.org/ >>> * <http://www.apache.org/>** >>> email: **[email protected]* <[email protected]>* cell: +94 77 3320919 >>> blog: **http://blog.afkham.org* <http://blog.afkham.org>* >>> twitter: **http://twitter.com/afkham_azeez*<http://twitter.com/afkham_azeez> >>> * >>> linked-in: **http://lk.linkedin.com/in/afkhamazeez* >>> * >>> * >>> *Lean . Enterprise . Middleware* >>> >>> _______________________________________________ >>> Architecture mailing list >>> [email protected] >>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture >>> >>> >> >> >> -- >> Sagara Gunathunga >> >> Technical Lead; WSO2, Inc.; http://wso2.com >> V.P Apache Web Services ; http://ws.apache.org/ >> Blog ; http://ssagara.blogspot.com >> >> _______________________________________________ >> Dev mailing list >> [email protected] >> http://wso2.org/cgi-bin/mailman/listinfo/dev >> >> > > > -- > *Afkham Azeez* > Director of Architecture; WSO2, Inc.; http://wso2.com > Member; Apache Software Foundation; http://www.apache.org/ > * <http://www.apache.org/>** > email: **[email protected]* <[email protected]>* cell: +94 77 3320919 > blog: **http://blog.afkham.org* <http://blog.afkham.org>* > twitter: **http://twitter.com/afkham_azeez*<http://twitter.com/afkham_azeez> > * > linked-in: **http://lk.linkedin.com/in/afkhamazeez* > * > * > *Lean . Enterprise . Middleware* > -- Sagara Gunathunga Technical Lead; WSO2, Inc.; http://wso2.com V.P Apache Web Services ; http://ws.apache.org/ Blog ; http://ssagara.blogspot.com
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
