Author: dlestrat
Date: Sat Jul 30 10:39:19 2005
New Revision: 226553

URL: http://svn.apache.org/viewcvs?rev=226553&view=rev
Log:
More security docs.

Added:
    portals/jetspeed-2/trunk/components/security/xdocs/atz-spi.xml
    portals/jetspeed-2/trunk/components/security/xdocs/hierarchy.xml
    
portals/jetspeed-2/trunk/components/security/xdocs/images/group-security-handler-c.gif
   (with props)
    
portals/jetspeed-2/trunk/components/security/xdocs/images/role-security-handler-c.gif
   (with props)
    
portals/jetspeed-2/trunk/components/security/xdocs/images/security-mapping-c.gif
   (with props)
Modified:
    portals/jetspeed-2/trunk/components/security/xdocs/config.xml
    portals/jetspeed-2/trunk/components/security/xdocs/images/arch-overview.gif
    portals/jetspeed-2/trunk/components/security/xdocs/navigation.xml

Added: portals/jetspeed-2/trunk/components/security/xdocs/atz-spi.xml
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/atz-spi.xml?rev=226553&view=auto
==============================================================================
--- portals/jetspeed-2/trunk/components/security/xdocs/atz-spi.xml (added)
+++ portals/jetspeed-2/trunk/components/security/xdocs/atz-spi.xml Sat Jul 30 
10:39:19 2005
@@ -0,0 +1,87 @@
+<?xml version="1.0"?>
+<!--
+    Copyright 2004 The Apache Software Foundation
+    
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+    
+    http://www.apache.org/licenses/LICENSE-2.0
+    
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<document>
+    <properties>
+        <title>Jetspeed 2 Security - Authorization/Security Mapping SPI</title>
+        <authors>
+            <person name="David Le Strat" email="[EMAIL PROTECTED]" />
+        </authors>
+    </properties>
+    <body>
+        <section name="Authorization/Security Mapping SPI Overview">
+            <p>
+                The authorization SPI provides the implementation to support 
Jetspeed 2 users, roles and groups associations and the roles/groups hierarchy
+                policy. It provides the underlying mechanism to support the 
implementation of the
+                <code>RoleManager</code>
+                and
+                <code>GroupManager</code>
+                .
+            </p>
+            <p>
+                As described in the
+                <a href="index.html">security overview</a>
+                , Jetspeed support hierarchical role based access control with 
configurable hierarchy policies.
+            </p>
+            <p>First, let's have a look at a class diagram of the 
authorization SPI:</p>
+            <p>
+                <img src="images/security-mapping-c.gif" border="0" />
+                <br />
+                <br />
+                <img src="images/role-security-handler-c.gif" border="0" />
+                <br />
+                <br />
+                <img src="images/group-security-handler-c.gif" border="0" />
+                <br />
+                <br />
+            </p>
+        </section>
+        <section name="Authorization SPI Components">
+            <p>The authorization SPI implements the following components:</p>
+            <table>
+                <tr>
+                    <th>Component</th>
+                    <th>Description</th>
+                </tr>
+                <tr>
+                    
<td>org.apache.jetspeed.security.spi.SecurityMappingHandler</td>
+                    <td>
+                        See <a 
href="config.html#security-spi-atz_xml">security-spi-atz.xml</a> configuration.
+                    </td>
+                </tr>
+                <tr>
+                    <td>org.apache.jetspeed.security.HierarchyResolver</td>
+                    <td>
+                        See <a href="hierarchy.html">hierarchy management</a>.
+                    </td>
+                </tr>
+                <tr>
+                    
<td>org.apache.jetspeed.security.spi.RoleSecurityHandler</td>
+                    <td>
+                        See <a 
href="config.html#security-spi-atz_xml">security-spi-atz.xml</a> configuration.
+                    </td>
+                </tr>
+                <tr>
+                    
<td>org.apache.jetspeed.security.spi.GroupSecurityHandler</td>
+                    <td>
+                        See <a 
href="config.html#security-spi-atz_xml">security-spi-atz.xml</a> configuration.
+                    </td>
+                </tr>
+
+            </table>
+        </section>
+    </body>
+</document>
\ No newline at end of file

Modified: portals/jetspeed-2/trunk/components/security/xdocs/config.xml
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/config.xml?rev=226553&r1=226552&r2=226553&view=diff
==============================================================================
--- portals/jetspeed-2/trunk/components/security/xdocs/config.xml (original)
+++ portals/jetspeed-2/trunk/components/security/xdocs/config.xml Sat Jul 30 
10:39:19 2005
@@ -1,61 +1,63 @@
 <?xml version="1.0"?>
 <!--
-Copyright 2004 The Apache Software Foundation
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
+    Copyright 2004 The Apache Software Foundation
+    
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+    
     http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+    
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
 -->
 <document>
-<properties>
-       <title>Jetspeed 2 Security Services Configuration</title>
-    <authors>
-      <person name="David Le Strat" email="[EMAIL PROTECTED]"/>
-    </authors>
-</properties>
-<body>
-<section name="Default configuration">
-<p>
-Jetspeed 2 default security services configuration leverages a relational 
database as its default persitent 
-datastore for security information.  Jetspeed 2 security service provider 
interface provides a mechanism
-to replace the default datastore configured.
-</p>
-<p>
-3 files are involved when configuring Jetspeed 2 security SPI.  All the SPI 
configuration files are
-located under 
<i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/assembly/</i>.
-</p>
-<subsection name="security-atn.xml">
-<p>
-This configuration file provides the login module configuration.  Not everyone
-needs this, as some application may decide to use another login module other 
than the one provided.
-</p>
-</subsection>
-<subsection name="security-atz.xml">
-<p>
-This configuration file configures the authorization policy, in J2's case <a 
href="atz-jass.html">RdbmsPolicy</a>.
-</p>
-</subsection>
-<subsection name="security-managers.xml">
-<p>
-This configuration file configures all the managers for security purpose.
-</p>
-</subsection>
-<subsection name="security-providers.xml">
-<p>
-This configuration file configures the various providers and weaves the SPI 
together.
-</p>
-<ul>
-<li><code>AuthenticationProviderProxy</code>: Configures the list of 
<code>AuthenticationProvider</code>
-and the default authenticator.
-<source><![CDATA[
+    <properties>
+        <title>Jetspeed 2 Security Services Configuration</title>
+        <authors>
+            <person name="David Le Strat" email="[EMAIL PROTECTED]" />
+        </authors>
+    </properties>
+    <body>
+        <section name="Default configuration">
+            <p>
+                Jetspeed 2 default security services configuration leverages a 
relational database as its default persitent datastore for security information.
+                Jetspeed 2 security service provider interface provides a 
mechanism to replace the default datastore configured.
+            </p>
+            <p>
+                3 files are involved when configuring Jetspeed 2 security SPI. 
All the SPI configuration files are located under
+                
<i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/assembly/</i>
+                .
+            </p>
+            <subsection name="security-atn.xml">
+                <p>
+                    This configuration file provides the login module 
configuration. Not everyone needs this, as some application may decide to use 
another
+                    login module other than the one provided.
+                </p>
+            </subsection>
+            <subsection name="security-atz.xml">
+                <p>
+                    This configuration file configures the authorization 
policy, in J2's case
+                    <a href="atz-jass.html">RdbmsPolicy</a>
+                    .
+                </p>
+            </subsection>
+            <subsection name="security-managers.xml">
+                <p>This configuration file configures all the managers for 
security purpose.</p>
+            </subsection>
+            <subsection name="security-providers.xml">
+                <p>This configuration file configures the various providers 
and weaves the SPI together.</p>
+                <ul>
+                    <li>
+                        <code>AuthenticationProviderProxy</code>
+                        : Configures the list of
+                        <code>AuthenticationProvider</code>
+                        and the default authenticator.
+                        <source>
+                            <![CDATA[
 <bean id="org.apache.jetspeed.security.AuthenticationProviderProxy" 
    class="org.apache.jetspeed.security.impl.AuthenticationProviderProxyImpl">  
           
    <constructor-arg >
@@ -65,11 +67,14 @@
    </constructor-arg>
   <constructor-arg><value>DefaultAuthenticator</value></constructor-arg>
 </bean>]]>
-</source>
-</li>
-<li><code>AuthenticationProvider</code>: Configure the authentication 
providers for the current portal implementation.
-The example below configures the default authenticator that uses the RDBMS to 
manage/store user information.
-<source><![CDATA[
+                        </source>
+                    </li>
+                    <li>
+                        <code>AuthenticationProvider</code>
+                        : Configure the authentication providers for the 
current portal implementation. The example below configures the default 
authenticator
+                        that uses the RDBMS to manage/store user information.
+                        <source>
+                            <![CDATA[
 <bean id="org.apache.jetspeed.security.AuthenticationProvider" 
           
class="org.apache.jetspeed.security.impl.AuthenticationProviderImpl">           
    <constructor-arg 
index="0"><value>DefaultAuthenticator</value></constructor-arg>
@@ -82,53 +87,63 @@
       <ref bean="org.apache.jetspeed.security.spi.UserSecurityHandler"/>
    </constructor-arg>
 </bean>]]>
-</source>
-</li>
-</ul>
-</subsection>
-<subsection name="security-spi.xml">
-<p>
-This configuration file contains configuration that are common to the 
authentication and authorization SPIs.
-</p>
-<table>
-       <tr>
-               <th>Bean</th> 
-               <th>Description</th> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.security.spi.SecurityAccess</td>
-               <td>Used internally by the default OJB based SPI. Provide 
access to common action/methods
-               for the various SPI implementations.  The <i>SecurityAccess</i> 
bean is used by both the Authentication 
-               and Authorization SPIs.</td> 
-       </tr>
-</table>
-</subsection>
-<subsection name="security-spi-atn.xml">
-<p>
-This configuration file contains all the configurations for configuring the 
authentication SPI.
-</p>
-<table>
-       <tr>
-               <th>Bean</th> 
-               <th>Description</th>
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.security.spi.CredentialHandler</td>
-               <td>The <i>CredentialHandler</i> encapsulates the operations 
involving manipulation 
-               of credentials.  The default implementation provides support 
for password protection as
-               defined by the <i>PasswordCredentialProvider</i>; as well as 
lifecycle management of
-               credentials through 
<i>InternalPasswordCredentialInterceptor</i> which manages parameters such as
-               maximum number of authentication failures, maximum life span of 
a credential in days and how much history
-               to retain for a given credential.</td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.security.spi.UserSecurityHandler</td> 
-               <td>The <i>UserSecurityHandler</i> encapuslated all the 
operations around the user principals.</td> 
-       </tr>
-</table>
-<p>
-    A sample <code>CredentialHandler</code> configuration could be:
-    <source><![CDATA[
+                        </source>
+                    </li>
+                </ul>
+            </subsection>
+            <subsection name="security-spi.xml">
+                <p>This configuration file contains configuration that are 
common to the authentication and authorization SPIs.</p>
+                <table>
+                    <tr>
+                        <th>Bean</th>
+                        <th>Description</th>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.SecurityAccess</td>
+                        <td>
+                            Used internally by the default OJB based SPI. 
Provide access to common action/methods for the various SPI implementations. The
+                            <i>SecurityAccess</i>
+                            bean is used by both the Authentication and 
Authorization SPIs.
+                        </td>
+                    </tr>
+                </table>
+            </subsection>
+            <subsection name="security-spi-atn.xml">
+                <p>This configuration file contains all the configurations for 
configuring the authentication SPI.</p>
+                <table>
+                    <tr>
+                        <th>Bean</th>
+                        <th>Description</th>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.CredentialHandler</td>
+                        <td>
+                            The
+                            <i>CredentialHandler</i>
+                            encapsulates the operations involving manipulation 
of credentials. The default implementation provides support for password
+                            protection as defined by the
+                            <i>PasswordCredentialProvider</i>
+                            ; as well as lifecycle management of credentials 
through
+                            <i>InternalPasswordCredentialInterceptor</i>
+                            which manages parameters such as maximum number of 
authentication failures, maximum life span of a credential in days and how much
+                            history to retain for a given credential.
+                        </td>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.UserSecurityHandler</td>
+                        <td>
+                            The
+                            <i>UserSecurityHandler</i>
+                            encapuslated all the operations around the user 
principals.
+                        </td>
+                    </tr>
+                </table>
+                <p>
+                    A sample
+                    <code>CredentialHandler</code>
+                    configuration could be:
+                    <source>
+                        <![CDATA[
 <bean id="org.apache.jetspeed.security.spi.CredentialPasswordValidator" 
  
class="org.apache.jetspeed.security.spi.impl.DefaultCredentialPasswordValidator"/>
 
@@ -156,90 +171,151 @@
    <!-- historySize -->     
    <constructor-arg index="2"><value>3</value></constructor-arg>       
 </bean>]]>
-    </source>
-</p>
-</subsection>
-<subsection name="security-spi-atz.xml">
-<p>
-This configuration file contains all the configurations for configuring the 
authorization SPI.
-</p>
-<table>
-       <tr>
-               <th>Bean</th> 
-               <th>Description</th>
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.security.spi.RoleSecurityHandler</td>
-               <td>The <i>RoleSecurityHandler</i> encapsulates all the 
operations around the role principals.</td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.security.spi.GroupSecurityHandler</td> 
-               <td>The <i>GroupSecurityHandler</i> encapsulates all the 
operations around the group principals.</td> 
-       </tr>
-       <tr>
-               
<td>org.apache.jetspeed.security.spi.SecurityMappingHandler</td> 
-               <td>The <i>SecurityMappingHandler</i> encapsulates all the 
operations involving mapping between principals.
-               It contains the logic managing hierarchy resolution for 
hierarchical principals (roles or groups).
-               The default hierarchy resolution provided is a hierarchy by 
generalization (see overview for definitions).
-           A <i>contructor-arg</i> can be added to the 
<i>SecurityMappingHandler</i> to change the hierarchy resolution
-           strategy.  Jetspeed 2 also support a hierarchy resolution by 
aggregation.</td> 
-       </tr>
-</table>
-</subsection>
-</section>
-<section name="LDAP Configuration">
-<p>
-Jetspeed 2 provides LDAP support for authentication.  Configuring LDAP 
authentication can be done by replacing the 
-configuration files located under 
<i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/assembly/</i> by the
-files located under as indicated 
<i>${jetspeed-source-home}/components/security/etc/</i>.
-below.
-</p>
-<p>
-Jetspeed 2 <b>does not currently provide an embedded LDAP directory</b>. A 
external LDAP directory must be configured
-in order to leverage this functionality.
-</p>
-<p>
-<i>security-spi-atn.xml</i> should be replaced by 
<i>security-spi-ldap-atn.xml</i> and  
-<i>security-spi-ldap.xml</i> should be copied to the assembly directory as 
well.
-</p>
-<p>
-The <i>security-spi-ldap-atn.xml</i> preforms the same functions as the 
<i>security-spi-atn.xml</i>
-described above.  It replaces the default implementation for 
<i>CredentialHandler</i> and
-<i>UserSecurityHandler</i> with an LDAP specific implementation.
-</p>
-<p> 
-Additionally, <i>ldap.properties</i> located under 
<i>${jetspeed-source-home}/components/security/etc/</i> should
-be copied under <i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/conf/</i>.
-</p>
-<subsection name="ldap.properties">
-<table>
-       <tr>
-               <th>Property</th> 
-               <th>Value</th> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.ldap.ldapServerName</td>
-               <td>The LDAP server name to connect to. E.g. 
<i>localhost</i></td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.ldap.rootDn</td> 
-               <td>The root domain name. E.g. 
<i>cn=Manager,dc=proto,dc=dataline,dc=com</i>.  In
-               properties files the "=" in the value should be escaped, i.e. 
<i>cn\=Manager,dc\=proto,dc\=dataline,dc\=com</i></td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.ldap.rootPassword</td> 
-               <td>The root password.</td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.ldap.rootContext</td> 
-               <td>The root context. E.g. 
<i>dc=proto,dc=dataline,dc=com</i></td> 
-       </tr>
-       <tr>
-               <td>org.apache.jetspeed.ldap.defaultDnSuffix</td> 
-               <td>The default suffix. E.g. <i>ou=Norfolk,o=Dataline</i></td> 
-       </tr>
-</table>
-</subsection>
-</section>
-</body>
+                    </source>
+                </p>
+            </subsection>
+            <subsection name="security-spi-atz.xml">
+                <p>This configuration file contains all the configurations for 
configuring the authorization SPI.</p>
+                <table>
+                    <tr>
+                        <th>Bean</th>
+                        <th>Description</th>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.RoleSecurityHandler</td>
+                        <td>
+                            The
+                            <i>RoleSecurityHandler</i>
+                            encapsulates all the operations around the role 
principals.
+                        </td>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.GroupSecurityHandler</td>
+                        <td>
+                            The
+                            <i>GroupSecurityHandler</i>
+                            encapsulates all the operations around the group 
principals.
+                        </td>
+                    </tr>
+                    <tr>
+                        
<td>org.apache.jetspeed.security.spi.SecurityMappingHandler</td>
+                        <td>
+                            The
+                            <i>SecurityMappingHandler</i>
+                            encapsulates all the operations involving mapping 
between principals. It contains the logic managing hierarchy resolution for
+                            hierarchical principals (roles or groups). The 
default hierarchy resolution provided is a hierarchy by generalization (see 
overview
+                            for definitions). A
+                            <i>contructor-arg</i>
+                            can be added to the
+                            <i>SecurityMappingHandler</i>
+                            to change the hierarchy resolution strategy. 
Jetspeed 2 also support a hierarchy resolution by aggregation.
+                        </td>
+                    </tr>
+                </table>
+                <p>
+                    A sample
+                    <code>SecurityMappingHandler</code>
+                    configuration could be:
+                    <source><![CDATA[
+<!-- Security SPI: SecurityMappingHandler -->
+<bean id="org.apache.jetspeed.security.spi.SecurityMappingHandler" 
+      
class="org.apache.jetspeed.security.spi.impl.DefaultSecurityMappingHandler">    
    
+   <constructor-arg >
+      <ref bean="org.apache.jetspeed.security.spi.SecurityAccess"/>
+   </constructor-arg>
+   <!-- Default role hierarchy strategy is by generalization.  
+        Add contructor-arg to change the strategy. -->
+   <!-- Default group hierarchy strategy is by generalization.  
+        Add contructor-arg to change the strategy. -->
+</bean>]]>
+                    </source>
+                </p>
+            </subsection>
+        </section>
+        <section name="LDAP Configuration">
+            <p>
+                Jetspeed 2 provides LDAP support for authentication. 
Configuring LDAP authentication can be done by replacing the configuration 
files located
+                under
+                
<i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/assembly/</i>
+                by the files located under as indicated
+                <i>${jetspeed-source-home}/components/security/etc/</i>
+                . below.
+            </p>
+            <p>
+                Jetspeed 2
+                <b>does not currently provide an embedded LDAP directory</b>
+                . A external LDAP directory must be configured in order to 
leverage this functionality.
+            </p>
+            <p>
+                <i>security-spi-atn.xml</i>
+                should be replaced by
+                <i>security-spi-ldap-atn.xml</i>
+                and
+                <i>security-spi-ldap.xml</i>
+                should be copied to the assembly directory as well.
+            </p>
+            <p>
+                The
+                <i>security-spi-ldap-atn.xml</i>
+                preforms the same functions as the
+                <i>security-spi-atn.xml</i>
+                described above. It replaces the default implementation for
+                <i>CredentialHandler</i>
+                and
+                <i>UserSecurityHandler</i>
+                with an LDAP specific implementation.
+            </p>
+            <p>
+                Additionally,
+                <i>ldap.properties</i>
+                located under
+                <i>${jetspeed-source-home}/components/security/etc/</i>
+                should be copied under
+                <i>${jetspeed-source-home}/portal/src/webapp/WEB-INF/conf/</i>
+                .
+            </p>
+            <subsection name="ldap.properties">
+                <table>
+                    <tr>
+                        <th>Property</th>
+                        <th>Value</th>
+                    </tr>
+                    <tr>
+                        <td>org.apache.jetspeed.ldap.ldapServerName</td>
+                        <td>
+                            The LDAP server name to connect to. E.g.
+                            <i>localhost</i>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td>org.apache.jetspeed.ldap.rootDn</td>
+                        <td>
+                            The root domain name. E.g.
+                            <i>cn=Manager,dc=proto,dc=dataline,dc=com</i>
+                            . In properties files the "=" in the value should 
be escaped, i.e.
+                            <i>cn\=Manager,dc\=proto,dc\=dataline,dc\=com</i>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td>org.apache.jetspeed.ldap.rootPassword</td>
+                        <td>The root password.</td>
+                    </tr>
+                    <tr>
+                        <td>org.apache.jetspeed.ldap.rootContext</td>
+                        <td>
+                            The root context. E.g.
+                            <i>dc=proto,dc=dataline,dc=com</i>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td>org.apache.jetspeed.ldap.defaultDnSuffix</td>
+                        <td>
+                            The default suffix. E.g.
+                            <i>ou=Norfolk,o=Dataline</i>
+                        </td>
+                    </tr>
+                </table>
+            </subsection>
+        </section>
+    </body>
 </document>

Added: portals/jetspeed-2/trunk/components/security/xdocs/hierarchy.xml
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/hierarchy.xml?rev=226553&view=auto
==============================================================================
--- portals/jetspeed-2/trunk/components/security/xdocs/hierarchy.xml (added)
+++ portals/jetspeed-2/trunk/components/security/xdocs/hierarchy.xml Sat Jul 30 
10:39:19 2005
@@ -0,0 +1,34 @@
+<?xml version="1.0"?>
+<!--
+    Copyright 2004 The Apache Software Foundation
+    
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+    
+    http://www.apache.org/licenses/LICENSE-2.0
+    
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<document>
+    <properties>
+        <title>Jetspeed 2 Security - Hierarchy Management</title>
+        <authors>
+            <person name="David Le Strat" email="[EMAIL PROTECTED]" />
+        </authors>
+    </properties>
+    <body>
+        <section name="Hierarchy Management Overview">
+            <p>
+            </p>
+        </section>
+        <section name="Leveraging Preferences to Manage Hierarchies">
+            <p>
+            </p>
+        </section>
+    </body>
+</document>
\ No newline at end of file

Modified: 
portals/jetspeed-2/trunk/components/security/xdocs/images/arch-overview.gif
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/images/arch-overview.gif?rev=226553&r1=226552&r2=226553&view=diff
==============================================================================
Binary files - no diff available.

Added: 
portals/jetspeed-2/trunk/components/security/xdocs/images/group-security-handler-c.gif
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/images/group-security-handler-c.gif?rev=226553&view=auto
==============================================================================
Binary file - no diff available.

Propchange: 
portals/jetspeed-2/trunk/components/security/xdocs/images/group-security-handler-c.gif
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: 
portals/jetspeed-2/trunk/components/security/xdocs/images/role-security-handler-c.gif
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/images/role-security-handler-c.gif?rev=226553&view=auto
==============================================================================
Binary file - no diff available.

Propchange: 
portals/jetspeed-2/trunk/components/security/xdocs/images/role-security-handler-c.gif
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: 
portals/jetspeed-2/trunk/components/security/xdocs/images/security-mapping-c.gif
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/images/security-mapping-c.gif?rev=226553&view=auto
==============================================================================
Binary file - no diff available.

Propchange: 
portals/jetspeed-2/trunk/components/security/xdocs/images/security-mapping-c.gif
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Modified: portals/jetspeed-2/trunk/components/security/xdocs/navigation.xml
URL: 
http://svn.apache.org/viewcvs/portals/jetspeed-2/trunk/components/security/xdocs/navigation.xml?rev=226553&r1=226552&r2=226553&view=diff
==============================================================================
--- portals/jetspeed-2/trunk/components/security/xdocs/navigation.xml (original)
+++ portals/jetspeed-2/trunk/components/security/xdocs/navigation.xml Sat Jul 
30 10:39:19 2005
@@ -30,8 +30,10 @@
             <item name="Authorization" href="atz.html">
                 <item name="JAAS Authorization" href="atz-jaas.html"/>
                 <item name="PermissionManager Overview" 
href="permission.html"/>
+                <item name="Authorization/Security Mapping SPI" 
href="atz-spi.html"/>
+                <item name="Hierarchy Management" href="hierarchy.html"/>
             </item>
-            <item name="Aggregate Security Services" href="#" />
+            <item name="High Level Security Services" href="#" />
             <item name="Security Services Configuration" href="config.html" />
         </menu>
         <menu name="Misc.">



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to