Today we reintegrated the MH-5308 branch into the trunk. This brings two new features:
* Access control can now be set on mediapackages. The Java API is simple: a list of AccessControlEntries can be set, specifying role+action+allow/deny. These rules are stored as a XACML [1] mediapackage attachment. This way, we can transport our access rules to each of the distribution channels, which are free to do with them what they like. * A simple JPA-based implementation of the Spring UserDetailService that replaces the old in-memory version. We will be iterating on this to define a *very thin* API as well as a few alternate implementations (e.g. LDAP) so switching user directory services is as simple as swapping between OSGI bundles. Next steps: * Alternate user directory implementations * Integrating with the downloads service (to protect progressive download media) * Integrating with the search service, so results are pre-filtered for the current user [1] http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf Please remember to update your security.xml file in felix/conf/ Please let us know if you run into any problems, or have questions. Thanks, Tobias and Josh _______________________________________________ Matterhorn mailing list [email protected] http://lists.opencastproject.org/mailman/listinfo/matterhorn To unsubscribe please email [email protected] _______________________________________________
