Re: Wicket Security - best practices?

2008-10-14 Thread James Carman
It probably shouldn't remain in an apache package, since it's not officially an apache project. On Tue, Oct 14, 2008 at 11:29 AM, Igor Vaynberg [EMAIL PROTECTED] wrote: i dont think any of us have time and energy to take on another core module that we would have to keep in sync with jsecurity.

Re: Wicket Security - best practices?

2008-10-14 Thread Les Hazlewood
Question - I came across the terms Swarm and Wasp a while ago, but didn't see them mentioned in Wicket In Action in the Security chapter. I've been using the book as sort of my starting point for writing JSecurity's integration. Are these other things no longer used? I mentioned in my previous

Re: Wicket Security - best practices?

2008-10-14 Thread Igor Vaynberg
i dont think any of us have time and energy to take on another core module that we would have to keep in sync with jsecurity. i suggest putting it in wicketstuff first and letting it mature there for a while. we can always reevaluate later. -igor On Tue, Oct 14, 2008 at 7:44 AM, Maarten

Re: Wicket Security - best practices?

2008-10-14 Thread Maarten Bosteels
Hello Les, Great news ! No idea where these files should go. I guess wicket-core shouldn't depend on jsecurity and vice versa, right ? So maybe you could add it to wicket-stuff ? That's also where the Wicket-Acegi examples are located AFAIK. But I have the feeling that the quality and level of

Re: Wicket Security - best practices?

2008-10-13 Thread Maarten Bosteels
Hello Les, On Thu, Sep 25, 2008 at 5:11 PM, Les Hazlewood [EMAIL PROTECTED]wrote: Haha, funny you should ask this - I'm doing it now ;) Well, it wasn't pure coincidence: I saw your name appearing on the wicket mailing-list a few weeks ago and I was kinda hoping for this answer ;-) I've

Re: Wicket Security - best practices?

2008-10-13 Thread Les Hazlewood
Hi Maarten, So far things are going great - it took almost no time at all to integrate the two projects, which I consider a reflection of the good design of both architectures ;) I have a few classes created that basically recreates the SignIn* classes in chapter 11 of Wicket In Action to show

Wicket Security - best practices?

2008-09-25 Thread Claus Myglegaard Vagner
Hi, I'm about to start a new project using Wicket and is currently examining which security framework to apply for. I'm looking for best practices implementing security to a Wicket application. Wicket has WASP which Swarm is an implementation of and then there is wicket-auth-roles. Is

Re: Wicket Security - best practices?

2008-09-25 Thread James Carman
You can bridge the gap between Spring Security's default URL-based model and the component-based model in Wicket. That's what we do here at work. If you want an example, let me know. I've got one out there on my public example stuff somewhere. You could try poking around in (I think it's

Re: Wicket Security - best practices?

2008-09-25 Thread Maarten Bosteels
Hi, Anyone tried integrating Wicket with JSecurity ? http://www.jsecurity.org/ Maarten On Thu, Sep 25, 2008 at 4:54 PM, James Carman [EMAIL PROTECTED] wrote: You can bridge the gap between Spring Security's default URL-based model and the component-based model in Wicket. That's what we do

Re: Wicket Security - best practices?

2008-09-25 Thread James Carman
I was planning on doing that when I saw their proposal come into the ASF incubator. It looks like a nice project. On Thu, Sep 25, 2008 at 11:05 AM, Maarten Bosteels [EMAIL PROTECTED] wrote: Hi, Anyone tried integrating Wicket with JSecurity ? http://www.jsecurity.org/ Maarten On Thu,

Re: Wicket Security - best practices?

2008-09-25 Thread Les Hazlewood
Haha, funny you should ask this - I'm doing it now ;) I've recently started using Wicket for my latest web application, and naturally I wanted to do this. I'll have to do a little write-up when I'm finished with it. Any questions that I could help with in particular in the meantime? Naturally,

Re: Wicket Security - best practices?

2008-09-25 Thread James Carman
Les, small world! If you'd like some help, let me know. I might switch our projects at work over to JSecurity. On Thu, Sep 25, 2008 at 11:11 AM, Les Hazlewood [EMAIL PROTECTED] wrote: Haha, funny you should ask this - I'm doing it now ;) I've recently started using Wicket for my latest web