On Wed, Oct 20, 2010 at 4:39 PM, <christian.muel...@nvoe.at> wrote: > > http://geoserver.org/display/GEOS/GSIP+54+Upgrade+Geoserver+security+to+Spring+Security+2.0
If one reads the proposal he might think GeoServer uses its own authentication implementation, however that is not true, it uses Acegi, which is the old Spring Security, however it does so in a way that is not pluggable and that should be amended. Also, the proposal talks about "security" generically, and at one point about authentication/authorization. I'm +1 on making the authentication mechanism be pluggable and use Spring Security 2.0, but not on making the authorization use Spring Security instead: the authorization should be eventually made more pluggable, but I find the Spring Security way of doing authorization quite obscure. For both authentication and authorization I would like to see a design of how you want to modify the code to make it pluggable. I'm +1 on using Spring Security 2.0, however that by itself does not make much of a GSIP, I don't want for people to think that any implementation using Spring Security 2.0 will be accepted because of the vote on the GSIP: a specific design will have to be provided and voted separately. Cheers Andrea > Christian > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > > ------------------------------------------------------------------------------ > Nokia and AT&T present the 2010 Calling All Innovators-North America contest > Create new apps & games for the Nokia N8 for consumers in U.S. and Canada > $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing > Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store > http://p.sf.net/sfu/nokia-dev2dev > _______________________________________________ > Geoserver-devel mailing list > Geoserver-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-devel > > -- ----------------------------------------------------- Ing. Andrea Aime Senior Software Engineer GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584962313 fax: +39 0584962313 http://www.geo-solutions.it http://geo-solutions.blogspot.com/ http://www.linkedin.com/in/andreaaime http://twitter.com/geowolf ----------------------------------------------------- ------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev _______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
