[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13649562#comment-13649562
]
Tommaso Teofili commented on JCR-3534:
--
> the public API is still missing (BinaryRefere
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13648576#comment-13648576
]
Alexander Klimetschek commented on JCR-3534:
HMAC stuff is good afaics (not an e
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13644389#comment-13644389
]
Thomas Mueller commented on JCR-3534:
-
> we may defer the salt / expiry stuff as possibl
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13644369#comment-13644369
]
Tommaso Teofili commented on JCR-3534:
--
bq. To avoid further delay, we could already st
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13641579#comment-13641579
]
Thomas Mueller commented on JCR-3534:
-
> > Well, this message is an access token.
> The
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13641519#comment-13641519
]
Felix Meschberger commented on JCR-3534:
> Well, this message is an access token.
I
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13641512#comment-13641512
]
Thomas Mueller commented on JCR-3534:
-
> the price of parsing JSON ... Not worth it IMHO
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13641019#comment-13641019
]
Felix Meschberger commented on JCR-3534:
> To simplify development/support, the mess
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640533#comment-13640533
]
Thomas Mueller commented on JCR-3534:
-
To avoid further delay, we could already start im
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640461#comment-13640461
]
Thomas Mueller commented on JCR-3534:
-
Jukka, I understand now what your attack scenario
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640457#comment-13640457
]
Alexander Klimetschek commented on JCR-3534:
I agree with Jukka - we are not tal
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640409#comment-13640409
]
Jukka Zitting commented on JCR-3534:
> Well, we wanted to make it secure, right?
The ma
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640369#comment-13640369
]
Thomas Mueller commented on JCR-3534:
-
Well, we wanted to make it secure, right?
Expiry
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640360#comment-13640360
]
Jukka Zitting commented on JCR-3534:
Why would the identifier need to be encrypted, salt
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13640355#comment-13640355
]
Thomas Mueller commented on JCR-3534:
-
I was chatting with Tommaso Teofili about the bas
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634997#comment-13634997
]
angela commented on JCR-3534:
-
fine with me.
> Add JackrabbitSession.getValueBy
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634985#comment-13634985
]
Jukka Zitting commented on JCR-3534:
> public API
+1 for createValue(Binary), with an a
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634974#comment-13634974
]
Felix Meschberger commented on JCR-3534:
> createValue(Binary)
If we have a custom
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634968#comment-13634968
]
Tommaso Teofili commented on JCR-3534:
--
bq. As mentioned earlier, I'd rather introduce
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634929#comment-13634929
]
Marcel Reutegger commented on JCR-3534:
---
> ValueFactory#createValue(String, PropertyTy
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634905#comment-13634905
]
Felix Meschberger commented on JCR-3534:
Re. ValueFactory#createValue(String, Proper
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634903#comment-13634903
]
angela commented on JCR-3534:
-
in general it seems that we agree on creating some sort of signin
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13634889#comment-13634889
]
Felix Meschberger commented on JCR-3534:
Re. signed "message" or HMAC
I agree with
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13608985#comment-13608985
]
Jukka Zitting commented on JCR-3534:
Note that there is no guarantee that the userIds of
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13608975#comment-13608975
]
angela commented on JCR-3534:
-
And what I discussed with Felix yesterday as well (again just qui
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13608971#comment-13608971
]
Thomas Mueller commented on JCR-3534:
-
Sounds good. In addition, I think we should consi
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13608930#comment-13608930
]
Marcel Reutegger commented on JCR-3534:
---
Here's what Angela and I briefly discussed ye
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13607707#comment-13607707
]
Thomas Mueller commented on JCR-3534:
-
(d) Content ids could expire after some time (for
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13606396#comment-13606396
]
Thomas Mueller commented on JCR-3534:
-
Possible security measures:
(a) The data store
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13606277#comment-13606277
]
angela commented on JCR-3534:
-
> What we want to use this feature for is for a "replication" fea
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13606270#comment-13606270
]
Alexander Klimetschek commented on JCR-3534:
I agree that the security aspect of
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13606193#comment-13606193
]
angela commented on JCR-3534:
-
i share jukka's concerns.
the way the permissions are extended i
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13606097#comment-13606097
]
Chetan Mehrotra commented on JCR-3534:
--
+1 for the new feature
JCR-3448 talks about si
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605375#comment-13605375
]
Alexander Klimetschek commented on JCR-3534:
Yes, a shared data store can be a m
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605201#comment-13605201
]
Thomas Mueller commented on JCR-3534:
-
I think the general problem here is: how do you a
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605186#comment-13605186
]
Thomas Mueller commented on JCR-3534:
-
> I would prefer the simpler return of "null" for
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605108#comment-13605108
]
Jukka Zitting commented on JCR-3534:
> well, copying lots of 20MB binaries ? instead of
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605083#comment-13605083
]
Felix Meschberger commented on JCR-3534:
> but is the overhead high enough to justif
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605073#comment-13605073
]
Alexander Klimetschek commented on JCR-3534:
I would prefer the simpler return o
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605071#comment-13605071
]
Jukka Zitting commented on JCR-3534:
> So JackrabbitValue.getContentIdentifier will not
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605061#comment-13605061
]
Felix Meschberger commented on JCR-3534:
> suggested getValueByContentId() method wo
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13605048#comment-13605048
]
Jukka Zitting commented on JCR-3534:
> I have two separate systems (separate JVMs and no
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13604991#comment-13604991
]
Felix Meschberger commented on JCR-3534:
This does not solve my problems at all: I h
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13604980#comment-13604980
]
Jukka Zitting commented on JCR-3534:
I'm not too excited about the idea of using a speci
[
https://issues.apache.org/jira/browse/JCR-3534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13604961#comment-13604961
]
Thomas Mueller commented on JCR-3534:
-
The patch looks good to me.
> Ad
45 matches
Mail list logo
