> We're using Cocoon on health care projects that need to
> protect XML content at a fine-grain level based on a user's role, context,
and state > of the data.  Rather than embedding this logic completely in the
persistence layer 
> or code (a DB or EJBs), we're doing it within transforms and actions.  

Hi Jack (John?),

This sounds an awful lot like what we are working on here at St. Jude
Children's Research Hospital...  I've posted about it some here on users and
some on dev.  Mostly architectural concerns: one area I'd like to see Cocoon
go is to make it possible to write all business and presentation logic as
XSLT rules triggered from XML templates.

> This allows us to audit various transactions to ensure they meet HIPAA
guidelines at 
> a very detailed level and express those data security policies as
constraints on
> XPath expressions - which non-programmers like physicians can actually
read and
> understand! :-)  

That's a bit different than our approach.  The security and audit rules are
written in  XSLT/Xpath, but they aren't implemented in such a way that I'd
expect anyone but a programmer to understand (though they are not to
opaque).  Eg:

      <xsl:if test="$auth != 'None' and $auth != ''">      <!-- can user see
object at all? -->

Or:
      <xsl:if test="contains(@authorization,'Update')">

> We've also been able to more easily cast their web applications as web
services, 
> VoiceXML services, and as AvantGo sources (e.g., a directory of regional
> physicians).

Haven't had to go their yet...

> Finally, the development and deployment of Cocoon
> solutions are very cost effective (TCD and TCO). 

Very important for a non-profit like us...

<snip/>

> I'm giving a tutorial on Cocoon next month ( http://www.eccnet.com/xmlug/
) here 
> in D.C.  I also noticed that Ivelin Ivanov is giving a talk in Austin, TX
USA next
> month too ( http://www.xmlaustin.org/_html_out/main/events.html )

If you ever make it near Memphis I think it would be worth getting together.
I used to get to the DC area every spring for the HCFA conferences but don't
have time for those these days...


---------------------------------------------------------------------
Please check that your question  has not already been answered in the
FAQ before posting.     <http://xml.apache.org/cocoon/faq/index.html>

To unsubscribe, e-mail:     <[EMAIL PROTECTED]>
For additional commands, e-mail:   <[EMAIL PROTECTED]>

Reply via email to