Here are the things I consider to be added value from Spring. I have no doubt that some of them, had we not come from a Spring-tastic background, could have been substituted via "pure OFBiz" things with a bit of work. We just took the path of least resistance for us.
1. Centralized configuration and syntax of all extra bits and custom modules and components, whether 3rd party or in-house. This encourages refactoring and modularization of code. It also makes dumb config errors easy to spot for developers. 2. Much easier automated integration testing. OFBiz is not big on automated testing, as I have pointed out in a previous post a while back. Spring makes it simple for our automated tests to use the exact same config with only certain components swapped with test-specific versions. 3. Security. We use Acegi (the wierdly named Spring security module), and have just pointed it at OFBiz user_login table. We're in the middle of plugging it more correctly into the OFBiz security module. It has a much more flexible API to do just about anything. cameron ----- Original Message ---- From: Jacques Le Roux <[EMAIL PROTECTED]> To: Cameron Smith <[EMAIL PROTECTED]>; [email protected] Sent: Thursday, 21 December, 2006 12:06:43 AM Subject: Re: Authorization and SSO server for ofbiz offer Can't say best, just one point : Lucene API is already used in OFBiz to index words search I guess (in content module) BTW Cameron what kinds of values is adding Spring to you ? Or is it because your application was already using it and hence it's easier to let it like that ? Thanks Jacques From: "Cameron Smith" <[EMAIL PROTECTED]> > Talking only about the technology frameworks here.... > > 1. Hibernate: the obvious choice would to swap it with OFBiz Entity Engine, > since they do very similar things, and the basic ideas are very similar. I have never used the EE outside of OFBiz but it must be doable as Atlassian JIRA which must have to be hard as f*ck, uses the EE as its persistence engine. > > 2. Spring: I have been using Spring plus OFBiz together for while, without > problems. I load the ApplicationContext from my webapp. I do LESS THINGS with Spring, as OFBiz provides many of them (ex. declarative caching, Transaction mgt). But I reckon it still adds value. If you ported authsum to run as an optional module in the hot-deploy directory, (the mode used by OpenTAPS modules), then the core OFBiz itself has no dependency on Spring. People who want authsum funcionality could, for instance, simply... > a. Stick a configured authsum module into hot-deploy > b. Alter a few tags in some central OFBiz config file to point its security > system at authsum. > c. Restart. > > 3. Lucene. No experience here. > > Whatever, you probably WOULD need to refactor some of the core OFBiz security > stuff to make it a bit more pluggable, but I don't think this would be a huge job. > > cameron > > ----- Original Message ---- > From: spamsucks <[EMAIL PROTECTED]> > To: [email protected]; Jacques Le Roux <[EMAIL PROTECTED]> > Sent: Wednesday, 20 December, 2006 4:25:23 PM > Subject: Re: Authorization and SSO server for ofbiz offer > > Is springframework a problem? > > I could switch out hibernate to something else, since most of the fun is in > lucene. > > Do you understand what authsum could bring to ofbiz? It could tell you what > customers you can place an order on behalf of in a split second. > > > Phillip > ----- Original Message ----- > From: "Jacques Le Roux" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Tuesday, December 19, 2006 4:08 AM > Subject: Re: Authorization and SSO server for ofbiz offer > > > > Phillip, > > > > Just about licence : only Hibernate is really a problem since it's LGPL > > licenced > > > > BTW you may consider using Entity Engine in place of > > Hibernate/Spring/Tapestry because I can't see how all that would fit in > > OFBiz > > :o) > > > > It's up to you... > > > > Jacques > > > > ----- Original Message ----- > > From: "Phillip Rhodes" <[EMAIL PROTECTED]> > > To: <[email protected]> > > Sent: Tuesday, December 19, 2006 4:57 AM > > Subject: Authorization and SSO server for ofbiz offer > > > > > >> Hi, > >> My name is Phillip Rhodes, and I have been a java developer since '96, > >> and have integrated apps with Oracle 11i ERP systems, Tibco, Vertex, sso > >> and all kinds of interesting projects... > >> > >> I have a project called "authsum" , think of it as "sum of > >> authorizations" > >> http://www.authsum.org/ > >> > >> Good summary architecture diagram: > >> http://www.authsum.org/overview/index.html > >> > >> In summary, it's a SSO/Identity server. It communicates with client > >> applications via a JDBC or Web services api to figure out what > >> authorizations a user has. The authorizations are stored in a lucene > >> index, so it's fast (given how enterprises can have complicated > >> group/role structures). > >> > >> Anyway, just wanted to know if it would be possible to bolt this into > >> ofbiz. I would be willing to give the authsum code the same license > >> (apache). Unfortunately, it uses hibernate/spring/tapestry (open source > >> products) . > >> > >> It would also "complicate things" because it consists of 4 different > >> webapps that can be run in a distributed environment. But it also has a > >> SSO so that it could provide SSO across ofbiz/registration/user > >> admin/CMS/etc... > >> > >> Just putting a feeler out. > >> Phillip > >> > > > > > > > > > > > ___________________________________________________________ > All New Yahoo! Mail – Tired of [EMAIL PROTECTED]@! come-ons? Let our > SpamGuard protect you. http://uk.docs.yahoo.com/nowyoucan.html ___________________________________________________________ The all-new Yahoo! Mail goes wherever you go - free your email address from your Internet provider. http://uk.docs.yahoo.com/nowyoucan.html
