On 17 Dec 2008, at 03:59, Rory Douglas wrote:
As for the AccessManager, I think there are plans to upgrade Sling to Jackrabbit 1.5, so it may be more worthwhile to wait for that & use the repository-ACL-based AccessManager that comes with 1.5 rather than implementing your own. Or ping me & I can send you what I cobbled together for ACL-based control.
ACLs are not suitable for most web applications. They're declarative, while most interactive web applications require implicit or application specific security constraints. Sling really needs to allow custom AccessManager implementations.
-- Torgeir Veimo [email protected]
