Hi Eric,
I was looking for a security framework around and finally I found the security component, part of the fulcrum project.
It seems to be a good choice considering that it is open source, well designed (though it is an alpha version) and offers persistence through hibernate !
I have read the online explanations and the "simple" implementation model proposed with hibernate seems to be a good compromise between functionality and complexity.
However I'm not sure I have exactly understood the way to use the api.
So as described in the doc we have four entities : users, groups, roles and permissions.
I wondered if I can do this :
1. define fine grained permissions and hard code them in my applications to define what a user can do or see.
2. configure as many roles as I want : i.e. create roles and set permissions to the roles ( as long as the application relies only on permissions, roles can be created and deleted whitout any problem...)
3. set roles to groups
4. add users to groups
So groups are central in this design.
What I want to do is a web interface for managing users, groups and roles for web-applications (and I intend to insert the permissions directly in the database so they cannot be modified through the web interface).
Am I wrong with that ?
Mike
Eric Pugh wrote:
It was pointed out that JTA is a copyrighted jar from SUN, so I have removed it from jakarta.apache.org/turbine/repo. I am updating the build instructions instead to tell users to go to Hibernate.org and download it from there, since I can't seem to find a jarred up version on the Sun site to point to.
Eric
-----Original Message----- From: Eric Pugh [mailto:[EMAIL PROTECTED] Sent: Sunday, January 18, 2004 1:57 PM To: 'Turbine Users List' Subject: RE: Fulcrum Build Results -- REVISED missing dependencies
I really appreciate your digging through these things. Having a fresh environment means you see all the little things that my environment already has, and I missed. Out of curisotiy, I tried to download a JTA jar file, but all I could fine where individual class files from sun's site. I am tempted to keep the dependency information as:
<groupId>hibernate</groupId> <artifactId>jta</artifactId> <version>hib2.1</version> <url>http://hibernate.org/</url>
However, you can get it from jakarta.apache.org/turbine/repo, and I am going to turn on that repo by default, instead of off by default. Unless I can figure out some other location to download some sort of jta.jar file instead of individual classes from sun's site...
Eric
is 2.0-RC2-----Original Message----- From: Mike Manner [mailto:[EMAIL PROTECTED] Sent: Saturday, January 17, 2004 7:02 PM To: Turbine Users List Subject: Re: Fulcrum Build Results -- REVISED missing dependencies
Hi,
Thanks for this work, this actually allow the build of fulcrum project !
As you mentionned jta, as javamail, is an api available from sun site : http://java.sun.com/products/jta/
and cglib is an independant project
http://sourceforge.net/projects/cglib, the current release
and both are used by hibernate in is latest release 2.1.1URL to offer
this should explain the names of the jars...
Mike
Gerry Duprey wrote:
Howdy,things I
Okay - I am now able to build fulcrum (yeah!)
In terms of manual intervention, here is my revised list of
had to do because Maven didn't know how to handle:offering? Also, not
* javamail-1.3.jar
I know you have to manually download this. Can the version be
updated
to 1.3.1 since that is what the javasoft site is
sure if the notes belong here or not, but Javasoft/Sundistributes
thisjavamail-1.3.1.jar
named as "mail.jar" and it needs to be renamed to
* jdbc-2.0.jar I think this is a "known" need for maven -- just noting for completeness
* mckoidb-1.0.2.jar
Maven could not download this (and didn't have any
can reallyeither)mckoi/jars/mckoidb-1.0.2.jar
I downloaded it into my repository in as
* hibernate-cglib-2.1.1.jarhibernate
As Mike pointed out, this is really the cglib2.jar from
and I can imagine either documenting the need to dothis manually
or adding it to the downloadables Maven can do. Ithink it would
be really helpful, at a minimum, to change the name ascglib2.jar
and put it under cglib/jars in the repositoru as it isa seperate
project from hibernate.lib/jta.jar file from
* jta-hib2.1.jar
Again, Mike pointed out this is really just the
the hibernate install. JTA seems to have some otherissues (maybe
likedocs on the
javamail), but perhaps a closer to actual name and some
manual intervention required would help.though it
* ehcache-0.7.jar
The refresh Maven stuff did successfully download this,
was stored in the hibernate/jars directory of the Mavenrepository
and since it's not actually a project directly under Hibernateunder ehcache.
(though related), I might suggest it really belongs
But, I'm happy to report, I was able to build it. Now I
---------------------------------------------------------------------start having some fun :-)
Gerry
To unsubscribe, e-mail: [EMAIL PROTECTED][EMAIL PROTECTED]
For additional commands, e-mail:
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
