> We're using Cocoon on health care projects that need to > protect XML content at a fine-grain level based on a user's role, context, and state > of the data. Rather than embedding this logic completely in the persistence layer > or code (a DB or EJBs), we're doing it within transforms and actions.
Hi Jack (John?), This sounds an awful lot like what we are working on here at St. Jude Children's Research Hospital... I've posted about it some here on users and some on dev. Mostly architectural concerns: one area I'd like to see Cocoon go is to make it possible to write all business and presentation logic as XSLT rules triggered from XML templates. > This allows us to audit various transactions to ensure they meet HIPAA guidelines at > a very detailed level and express those data security policies as constraints on > XPath expressions - which non-programmers like physicians can actually read and > understand! :-) That's a bit different than our approach. The security and audit rules are written in XSLT/Xpath, but they aren't implemented in such a way that I'd expect anyone but a programmer to understand (though they are not to opaque). Eg: <xsl:if test="$auth != 'None' and $auth != ''"> <!-- can user see object at all? --> Or: <xsl:if test="contains(@authorization,'Update')"> > We've also been able to more easily cast their web applications as web services, > VoiceXML services, and as AvantGo sources (e.g., a directory of regional > physicians). Haven't had to go their yet... > Finally, the development and deployment of Cocoon > solutions are very cost effective (TCD and TCO). Very important for a non-profit like us... <snip/> > I'm giving a tutorial on Cocoon next month ( http://www.eccnet.com/xmlug/ ) here > in D.C. I also noticed that Ivelin Ivanov is giving a talk in Austin, TX USA next > month too ( http://www.xmlaustin.org/_html_out/main/events.html ) If you ever make it near Memphis I think it would be worth getting together. I used to get to the DC area every spring for the HCFA conferences but don't have time for those these days... --------------------------------------------------------------------- Please check that your question has not already been answered in the FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html> To unsubscribe, e-mail: <[EMAIL PROTECTED]> For additional commands, e-mail: <[EMAIL PROTECTED]>