[ 
https://wso2.org/jira/browse/MASHUP-1032?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19323#action_19323
 ] 

Jonathan Marsh commented on MASHUP-1032:
----------------------------------------

Stuck on this one a bit: The attached patch cribs some simple code from 
service_security_manager.jsp to find out which security scenario is applied and 
display its summary.  This works great when a user is signed in.  But the 
backend service fails if no user is signed in.  The information I'm retrieving 
isn't secret - it's encoded in the WSDL.  Is there a way the backend services 
can be used to determine on a read-only and anonymous basis what security 
scenario is applied?

> Show current security configuration on mashup.jsp
> -------------------------------------------------
>
>                 Key: MASHUP-1032
>                 URL: https://wso2.org/jira/browse/MASHUP-1032
>             Project: WSO2 Mashup Server
>          Issue Type: Improvement
>            Reporter: Jonathan Marsh
>            Assignee: Jonathan Marsh
>             Fix For: 1.6
>
>         Attachments: mashup.jsp_mashup-1032.patch
>
>
> When one isn't signed in, one can't see what security has been applied to a 
> mashup without looking at the WSDL.  We could indicate the security scenario 
> (without edit control) for non-owner/admins.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

_______________________________________________
Mashup-dev mailing list
[email protected]
http://mailman.wso2.org/cgi-bin/mailman/listinfo/mashup-dev

Reply via email to