Re: Isis Security Addon Custom ApplicationUser

2014-12-10 Thread GESCONSULTOR - Óscar Bou
Hi, Jeroen. Looking into this thread again, I've discovered also this link [1], telling how to integrate Fortress on a Wicket app. I'm sure Martin will have interest on it :) I agree that it would be quite heavy to use a full RBAC authorization system based on LDAP. I'm going to have the

Re: Isis Security Addon Custom ApplicationUser

2014-12-10 Thread Martin Grigorov
Hi Oscar, On Wed, Dec 10, 2014 at 11:58 AM, GESCONSULTOR - Óscar Bou o@gesconsultor.com wrote: Hi, Jeroen. Looking into this thread again, I've discovered also this link [1], telling how to integrate Fortress on a Wicket app. I'm sure Martin will have interest on it :) I am aware

Re: Isis Security Addon Custom ApplicationUser

2014-12-02 Thread Dan Haywood
On 22 November 2014 at 11:28, Dan Haywood d...@haywood-associates.co.uk wrote: I'll add a wiki page soon, but it'll only have the same info as is in this thread. just wrapping up this thread: see

Re: Isis Security Addon Custom ApplicationUser

2014-11-22 Thread Dan Haywood
OK, folks, I've just committed and pushed [1] to isis-module-security, to support both factories and contributions (by emitting events for all actions). I'll add a wiki page soon, but it'll only have the same info as is in this thread. Cheers Dan [1]

Re: Isis Security Addon Custom ApplicationUser

2014-11-21 Thread Martin Balmaceda
Greetings Thanks Dan, a great suggestion and not as crazy complicated as I was expecting. One question though: how extensible would the Organization be in this case? I imagine every use case would require this class to represent something different. On Thu, Nov 20, 2014 at 7:02 PM, Dan Haywood

Re: Isis Security Addon Custom ApplicationUser

2014-11-21 Thread Dan Haywood
Hi Martin, The point of this second design is that Organisation is your domain class, not part of the security module, so it can have whatever you want in it. Cheers, Dan On 21 Nov 2014 09:46, Martin Balmaceda martin.balmac...@gmail.com wrote: Greetings Thanks Dan, a great suggestion and not

Re: Isis Security Addon Custom ApplicationUser

2014-11-20 Thread Martin Grigorov
Hi, I am not familiar with isis security module but isn't it possible to use a (Shiro) Role as an Organization ? Martin Grigorov Wicket Training and Consulting https://twitter.com/mtgrigorov On Thu, Nov 20, 2014 at 10:31 AM, johandoornen...@filternet.nl wrote: - Hi Martin, maybe you can

Re: Isis Security Addon Custom ApplicationUser

2014-11-20 Thread Martin Balmaceda
Im not sure how using a Shiro role would work since they are predefined yet organizations can be added/removed dynamically On Thu, Nov 20, 2014 at 10:37 AM, Martin Grigorov mgrigo...@apache.org wrote: Hi, I am not familiar with isis security module but isn't it possible to use a (Shiro) Role

Re: Isis Security Addon Custom ApplicationUser

2014-11-20 Thread Martin Balmaceda
Thank you, I've been wondering what Tenancy was for. In my particular case though I think it would be passing on the problem, since I would then need to extend Tenancies somehow. I think the ideal solution would be to enable the security module to somehow specify which ApplicationUser domain

Re: Isis Security Addon Custom ApplicationUser

2014-11-20 Thread GESCONSULTOR
Hi all! I'm following the thread with a lot of interest. Problem is that this week I'm on holidays without access to the laptop (first time ever and it's being great :) I find some points here, nearly all them mentioned before: - The need for a Tenant / Tenancy entity. - The need for an

Re: Isis Security Addon Custom ApplicationUser

2014-11-20 Thread Dan Haywood
Hi folks, Great to see this thread with lots of useful contributions from everyone. ~~~ As Jeroen has said, we definitely intend to enhance the security module, though only as the exact requirements become clear. For Martin's requirement, to allow an Organization to be associated with the

Re: Isis Security Addon Custom ApplicationUser

2014-11-19 Thread Jeroen van der Wal
Hi Martin, I would advice against option 2 because you lose an easy update path to newer versions of the security module. Tell us more about your use-case so we can see what the options are. Cheers, Jeroen On Wed, Nov 19, 2014 at 2:24 PM, Martin Balmaceda martin.balmac...@gmail.com wrote:

Re: Isis Security Addon Custom ApplicationUser

2014-11-19 Thread Martin Balmaceda
Thanks I agree, option 1 is much better. As for my user case: I have a system that hosts a number or organizations orthogonally. What I need to do is associate each user to exactly 1 org so that he/she can only see and modify information belonging to that org. After looking at the problem, I