Hi. Thanks for the answers. Is there any date scheduled for the upgrade to Jackrabbit 1.5? ACL was what I was thinking to use, so maybe the upgrade resolves my problem (although I haven't been able to find much documentation on ACL in 1.5 (if someone knows where I can find it I'll appreciate the indication). What worries me the most is that if ACL in 1.5 is not suitable enough for my app, what would be the way to go?
On Wed, Dec 17, 2008 at 1:34 AM, Torgeir Veimo <[email protected]> wrote: > > On 17 Dec 2008, at 03:59, Rory Douglas wrote: > > As for the AccessManager, I think there are plans to upgrade Sling to >> Jackrabbit 1.5, so it may be more worthwhile to wait for that & use the >> repository-ACL-based AccessManager that comes with 1.5 rather than >> implementing your own. Or ping me & I can send you what I cobbled together >> for ACL-based control. >> > > > ACLs are not suitable for most web applications. They're declarative, while > most interactive web applications require implicit or application specific > security constraints. Sling really needs to allow custom AccessManager > implementations. > > > -- > Torgeir Veimo > [email protected] > > > > >
