As we move toward 1.2, we'll need to start testing authorization in the UI.
To facilitate this, I've enabled a demo data loader on startup, so you may
now log in to trunk builds as:
user1/pass1
user2/pass2
...
user999/pass999
Each user is a members of one series (series_0 through series_99), so once
the admin UI has the ability to set access control on series, you can test
which users have access to which mediapackages.
There are (at least) two major changes to the authentication system. First,
I've encrypted the passwords that we store in the database. This means that
regular user accounts can *not* log in via digest authentication, since
digest relies on having clear text passwords to compare hashes. I believe
this to be a positive step forward in terms of security, but it might break
some scripts out there. By default, the matterhorn_system_account/CHANGE_ME
account is still operational, so all HTTP remoting via the TrustedHttpClient
will function like it always has.
Second, I've added a configuration for setting the default welcome page,
based on the user's role. So if an administrator attempts to access "/",
s/he will be redirected to /welcome.html upon successful login. Other users
will be sent directly to /engage/ui/index.html. If a user attempts to
access something specific, other than "/", s/he will be redirected to that
URI once again after successful login. The configuration looks like this:
<map>
<entry key="ROLE_ADMIN" value="/welcome.html" />
<entry key="ROLE_USER" value="/engage/ui/index.html" />
<entry key="*" value="/engage/ui/index.html" /> <!-- Any role not
listed explicitly will redirect here -->
</map>
Please be sure to copy the latest config files to $FELIX/config.properties
and $FELIX/conf/security/mh_default_org.xml, and let me know if you have any
questions. If everything works smoothly, and folks are happy (or at least
quiet), I'll promote this mini-doc to the wiki.
Thanks,
Josh
_______________________________________________
Matterhorn mailing list
[email protected]
http://lists.opencastproject.org/mailman/listinfo/matterhorn
To unsubscribe please email
[email protected]
_______________________________________________
