Make secure object wrapping pluggable
-------------------------------------
Key: GEOS-2272
URL: http://jira.codehaus.org/browse/GEOS-2272
Project: GeoServer
Issue Type: Bug
Components: Security
Affects Versions: 1.7.0-RC3
Reporter: Andrea Aime
Assignee: Andrea Aime
Fix For: 1.7.1
Secure object wrapping, as implemented, hides the actual interfaces of the
wrapped objects, but in some cases (versioning, for example) those need to be
preserved. Yet, those interfaces might not be available in the main module.
Also, the catalog has some allowance for storing extra objects that are not the
well known ones, so it's not possible to foresee any object wrapping need.
Object wrapping should be make pluggable, using a wrapper factory interface as
an extension point.
Note: using proxies has been considered, but that would require checking the
method names against strings, making proxies quite vulnerable to any kind of
refactoring or method additions. The current approach on the other side ensures
a compile error occurrs, channeling the attention to the security related
wrappers and making it impossible to make inadverted changes that could
compromise a proper security wrapping.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
