On 03.02.2011, at 20:29, Johannes Schmitt wrote:

> Well, considering how often I still change the interface, that seems a bit 
> premature. As I mentioned during the IRC meeting, it might even be possible 
> to load parts of the configuration, or possibly everything from a YAML file. 
> 
> However, the interface can only improve if people provide constructive 
> feedback. So far, my feeling is that people have generally a negative 
> attitude towards this, and it seems that they have neither taken some time to 
> play around with it nor have they provided feedback nor have they dealed with 
> a complex configuration. If the Configuration class is not understandable, 
> then the question still remains if it is better/worse than the current state 
> of the SecurityExtension, or in general better/worse than the alternative if 
> we don't have this. My feeling simply is that people haven't invested much 
> time into making an informed decision on this point.
> 
> I agree that in many cases, you'll be fine with the way it is now (and you 
> won't be required to change it), but I honestly like to see one of the 
> persons who now vote to remove it add merging support to the 
> SecurityExtension.

Yeah, I think this might be just a case of something totally unmanageable 
getting a complex solution. It would be good to see this solution used for a 
simple case too, to see if its worth while in that scenario, but at the very 
least it must be reviewed side by side with an alternative solution to this 
very complex problem. I have worked on some of the security related code and 
its definitely not simple to deal with the fact that everything needs to be 
associated with dynamic DIC services.

regards,
Lukas Kahwe Smith
[email protected]



-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to