Re: Dynamic ACLs in Oak?

2013-12-10 Thread Angela Schreiber
hi note however, that this just covers the authentication part. as far as pluggable authorization is concerned this is definitely planned for OAK 1.0 but still work in progress. see https://issues.apache.org/jira/browse/OAK-1268 for a short description what is planned in this area... we

Dynamic ACLs in Oak?

2013-12-09 Thread Bertrand Delacretaz
Hi, Does Oak have an extension point where I can plugin my own dynamic ACL logic? A typical use case is hiding a content subtree to some of the JCR Sessions that are created, based on a decision done in my code at session creation time, without having to change any actual ACLs. To avoid

Re: Dynamic ACLs in Oak?

2013-12-09 Thread Bertrand Delacretaz
Hi, On Mon, Dec 9, 2013 at 5:34 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: ...Assuming a working JAAS setup, you can configure a custom optional LoginModule that adds extra principals to the current subject based on whatever criteria you want (source IP, HTTP header, phase of the moon,