[Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Murodullo Latifov
Hi people, This is to announce alpha release of DHIS2 + Struts2 (s2) + Spring Security2 (ss2) integration. As s2 and ss2 are major and system wide change, they need intensive testing. Code is available at URL: https://code.launchpad.net/~dhis2-devs/dhis2/d2s2ss2 . S2 is most resent upgrade

Re: [Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Knut Staring
Delighted to see progress on this. One thing that I've encountered (and which should become a blueprint), is that you would like to automatically generate users who only have access to subtrees (at a certain level). The concrete example is that you have all the countries in the world (grouped

Re: [Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Murodullo Latifov
Hi Knut, Good point. There is no automatic assignment in security, one must be authenticated before accessing resources, but if you mean by assigning top org unit hierarchy to give access to subs, its possible (not implemented). Current implementation gives lots of possibilities to do that

Re: [Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Murodullo Latifov
Hi Bob, Don't agree, I don't think LDAP gives something special, though it is there, we can activate it. Its useful when lazy guy does not want to login again, because he already logged into his windows machine and mostly have no time for this. In this case he can tick remember me once,

Re: [Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Murodullo Latifov
Hi Jo, The call is to tell us what kind of users you want to see and what access levels they have. For ordinary user to have access to change its password itself, you have to assign him role ROLE_dhis-web-maintenance-user, but its initial set, we are calling for more options ans intensive

Re: [Dhis2-devs] DHIS2 - Struts2 - Spring Security2

2009-08-14 Thread Bob Jolliffe
Hi Murod 2009/8/14 Murodullo Latifov murodlati...@yahoo.com Hi Bob, Don't agree, I don't think LDAP gives something special, though it is there, we can activate it. Its useful when lazy guy does not want to login again, because he already logged into his windows machine and mostly have no