Hi Eric,


I was looking for a security framework around and finally I found the security component, part of the fulcrum project.


It seems to be a good choice considering that it is open source, well designed (though it is an alpha version) and offers persistence through hibernate !


I have read the online explanations and the "simple" implementation model proposed with hibernate seems to be a good compromise between functionality and complexity.


However I'm not sure I have exactly understood the way to use the api.


So as described in the doc we have four entities : users, groups, roles and permissions.



I wondered if I can do this :


1. define fine grained permissions and hard code them in my applications to define what a user can do or see.

2. configure as many roles as I want : i.e. create roles and set permissions to the roles ( as long as the application relies only on permissions, roles can be created and deleted whitout any problem...)

3. set roles to groups

4. add users to groups


So groups are central in this design.



What I want to do is a web interface for managing users, groups and roles for web-applications (and I intend to insert the permissions directly in the database so they cannot be modified through the web interface).



Am I wrong with that ?



Mike




Eric Pugh wrote:

It was pointed out that JTA is a copyrighted jar from SUN, so I have removed
it from jakarta.apache.org/turbine/repo.  I am updating the build
instructions instead to tell users to go to Hibernate.org and download it
from there, since I can't seem to find a jarred up version on the Sun site
to point to.

Eric



-----Original Message-----
From: Eric Pugh [mailto:[EMAIL PROTECTED]
Sent: Sunday, January 18, 2004 1:57 PM
To: 'Turbine Users List'
Subject: RE: Fulcrum Build Results -- REVISED missing dependencies


I really appreciate your digging through these things. Having a fresh environment means you see all the little things that my environment already has, and I missed. Out of curisotiy, I tried to download a JTA jar file, but all I could fine where individual class files from sun's site. I am tempted to keep the dependency information as:

     <groupId>hibernate</groupId>
     <artifactId>jta</artifactId>
     <version>hib2.1</version>
     <url>http://hibernate.org/</url>

However, you can get it from jakarta.apache.org/turbine/repo,
and I am going
to turn on that repo by default, instead of off by default.
Unless I can
figure out some other location to download some sort of
jta.jar file instead
of individual classes from sun's site...

Eric



-----Original Message-----
From: Mike Manner [mailto:[EMAIL PROTECTED]
Sent: Saturday, January 17, 2004 7:02 PM
To: Turbine Users List
Subject: Re: Fulcrum Build Results -- REVISED missing dependencies



Hi,

Thanks for this work, this actually allow the build of
fulcrum project !


As you mentionned jta, as javamail, is an api available from sun site : http://java.sun.com/products/jta/

and cglib is an independant project
http://sourceforge.net/projects/cglib, the current release


is 2.0-RC2


and both are used by hibernate in is latest release 2.1.1

this should explain the names of the jars...


Mike






Gerry Duprey wrote:



Howdy,

Okay - I am now able to build fulcrum (yeah!)

In terms of manual intervention, here is my revised list of


things I


had to do because Maven didn't know how to handle:

* javamail-1.3.jar
I know you have to manually download this. Can the version be
updated
to 1.3.1 since that is what the javasoft site is


offering? Also, not


sure if the notes belong here or not, but Javasoft/Sun


distributes


this
named as "mail.jar" and it needs to be renamed to


javamail-1.3.1.jar


* jdbc-2.0.jar
   I think this is a "known" need for maven -- just noting for
   completeness

* mckoidb-1.0.2.jar
Maven could not download this (and didn't have any


URL to offer


either)
I downloaded it into my repository in as


mckoi/jars/mckoidb-1.0.2.jar


* hibernate-cglib-2.1.1.jar
As Mike pointed out, this is really the cglib2.jar from


hibernate


and I can imagine either documenting the need to do


this manually


or adding it to the downloadables Maven can do. I


think it would


be really helpful, at a minimum, to change the name as


cglib2.jar


and put it under cglib/jars in the repositoru as it is


a seperate


project from hibernate.

* jta-hib2.1.jar
Again, Mike pointed out this is really just the


lib/jta.jar file from


the hibernate install. JTA seems to have some other


issues (maybe


like
javamail), but perhaps a closer to actual name and some


docs on the


manual intervention required would help.

* ehcache-0.7.jar
The refresh Maven stuff did successfully download this,


though it


was stored in the hibernate/jars directory of the Maven


repository


and since it's not actually a project directly under Hibernate
(though related), I might suggest it really belongs


under ehcache.


But, I'm happy to report, I was able to build it. Now I


can really


start having some fun :-)

Gerry








---------------------------------------------------------------------


To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:


[EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]








---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to