Re: Security implementation: ACL draft-12 compliance

[Oliver Zeigermann]

I had the chance to follow this track a little bit further and had some 
success :) Namespaces were ok, I was wrong there. Actually, as I already 
suspected, the hasRole implementation did not check for the 
group-member-set property, but tried it the old (now invalid) way. Thus 
I have added a fixed hasRole method to ACLSecurityImpl. getRoles should 
have a similar treatment, but I have no time now :( Can someone else 
have a look at it?

If guest user in Domain.xml looks similar to this

<objectnode classname="org.apache.slide.structure.SubjectNode" 
uri="/users/guest">
  <revision>
    <property namespace="http://jakarta.apache.org/slide/"; 
name="password"></property>
  </revision>
</objectnode>

and root similar to this

<objectnode classname="org.apache.slide.structure.SubjectNode" 
uri="/users/root">
  <revision>
    <property namespace="http://jakarta.apache.org/slide/"; 
name="password">root</property>
  </revision>
</objectnode>

the wrapper works. Do not forget to give permission to guest if you use 
it this way.

As this really is a minor patch I will just check it in :) Peter, feel 
free to undo it...

Oliver

Oliver Zeigermann wrote:

I had a look at it and it seems there are a number of problems. One 
might be the namespaces are not set correctly, but even if you get this 
fixed it seems Tomcat asks for the role using hasRole. Unfortunately, 
even if you are root and Tomcat asks if root has role root SecurityImpl 
returns false. I have seen you did not overload hasRole in 
ACLSecurityImpl, but shouldn't it to return the right value?

Won't have enough time to investigate this in detail, I'm afraid

Oliver

Nevermann, Dr., Peter wrote:

 > Probably yes, sorry! This is still a TODO.
 >
 > I hadn't time yet to look at the SlideRealm but used the 
UserDatabaseRealm
 > (tomcat_users.xml) for testing. Have you had a look inside? Any idea 
what
 > the problems are?
 >
 > Regards,
 > Peter
 >
 >> -----Original Message-----
 >> From: Jacob Lund [mailto:[EMAIL PROTECTED]
 >> Sent: Thursday, November 06, 2003 11:11
 >> To: 'Slide Users Mailing List'
 >> Subject: RE: Security implementation: ACL draft-12 compliance
 >>
 >>
 >> Does this mean that the sliderealm does not work any more?
 >>
 >> /Jacob





---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
.





---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]