"Turpin, Jay" wrote:
>
> So if I understand the thread properly, are you proposing to get rid of the
> Group, Role and Permission class interfaces? How will this affect the
> TurbineSecurity, BaseSecurity, DBSecurityService chain, since these
> functions typically pass the interface?
>
> A co-worker and I spent all day yesterday trying to shoehorn the new Torque
> *Group* classes, which we like BTW, into the existing Group interface. Much
> more difficult than we first imagined. I would love to at least redesign the
> Group interface to be more in line with the new OM class, but that seems to
> affect a number of other modules, and we still don't have a good
> understanding of everything that would be touched by this change.
>
Changing the way the security system works is a important undertaking.
Martin is going to take the first stab at it ... there is a proposal
up on the website:
http://jakarta.apache.org/turbine/proposals/security-service.html
Please read this as this is what is going to be used as a basis
for making changes. The overhaul is going to happen in 2.2 and is
something that needs to be discussed and voted on.
In brief, what we discussed in the chat room yesterday is trying to
build up something new based on the layout in the proposal that
can co-exist with the old system. So we can deprecate the old
system while people move over the new system.
I will be adding some of Jon's ideas to the proposal today and
we'll probably start discussing this soon because Martin is
going to make an attempt to use Torque as well. So maybe you
can coordinate with him and get your ideas into the proposal.
We're also waiting for Rafal to come back because the security
system is his area of expertise and he will probably have many
useful comments. Hopefully we can start voting on security changes
when Rafal comes back because I believe his input is essential.
If you have some specifics about how you see the classes being
generated can you document it and sent it to the list and I will
add it as a point the security proposal.
--
jvz.
Jason van Zyl
[EMAIL PROTECTED]
http://jakarta.apache.org/velocity
http://jakarta.apache.org/turbine
http://jakarta.apache.org/commons
http://tambora.zenplex.org
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
