Christian Müller ha scritto:

Apologies for the late reply on this topic :-(

> The approach with the generic "security" mapping in web.xml is ok for me.  I 
> only want to get rid of this patch file. 

A generic security setup + url mapping in the context files works just 
fine for me as well.

> If we use the geoxacml component for geoserver itself (this is the 
> intension), then, I think, it must be a core component. 

Not so fast. GEOXACML is a very complicated way to setup security,
so imho it should be plugin instead. People needing basic security
can keep on using the old subsystem which does not require heavy
xml handling and already has an (almost complete) UI in the web-security
community module.

I can go for having GEOAXCML become the default in time if we can
make it as easy to use as the old one for the simple case (pay as you
go approach). But first it has to prove itself, be used as an extension
for some time and see some production usage.

> I urgently need the geoxamcl sub folder in the geoserver data dir (web2), 
> otherwise I get some chaos into the implementation. This directory contains 
> some predefined policy files, for the test cases I have to copy additional 
> files into that directory. 

There is an easy workaround for this that is already used in many other
GeoServer places: have your geoaxcml plugin keep default config files in
the classpath, and copy them over to the data directory when they are
first needed, if the data dir does not contain them (along with the
directories needed in the config, of course).

This is what every well behaved extension in need of configuration files
should do (we cannot have data dirs taking care or the needs of every
possible extension and community module by default, it would turn into
a mess).


Cheers
Andrea

-- 
Andrea Aime
OpenGeo - http://opengeo.org
Expert service straight from the developers.

------------------------------------------------------------------------------
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to