Thank you David!



David Sean Taylor <[EMAIL PROTECTED]> 
05-05-04 11:27
Por favor, responda a
"Jetspeed Users List" <[EMAIL PROTECTED]>


Para
"Jetspeed Users List" <[EMAIL PROTECTED]>
cc

Asunto
Re: Confused with security and Turbine







On May 5, 2004, at 6:51 AM, [EMAIL PROTECTED] wrote:

> Hi.
> In spite of having a recently support in the subject, I'm still not 
> really
> clear about where is the frontier between Turbine user management, and 
> a
> particular User Management implementation. Exactly, what I want to do, 
> is
> to implement my own persistent layer using hibernate (not Torque), 
> using a
> different (maybe) DB Schema. I understand that the first step is 
> implement
> the same classes within the 
> org.apache.jetspeed.services.security.turbine
> package, but,
> Is this the only implementation that I have to do??
> Can anybody tell me any other consideration that should I take??
>
You will need to replace the Jetspeed Security Services with your own 
Hibernate -based implementations.
You do not need to replace all of the security services, just the ones 
you need, since they are coupled only by the security interfaces 
described below:

Portal Authentication
Defines the contract between the portal and security provider required 
for authentication a Jetspeed User.

PortalAccessController
Defines the contract between the portal and security provider required 
for authorized access control for priveleged portal actions.

UserManagement
Defines the contract between the portal and security provider required 
for managing users.

RoleManagement
Defines the contract between the portal and security provider required 
for managing roles.

GroupManagement
Defines the contract between the portal and security provider required 
for managing groups.

PermissionManagement
Defines the contract between the portal and security provider required 
for managing permissions.

CredentialsManagement
Defines the contract between the portal and security provider required 
for managing credentials.

  Each of these component interfaces are pluggable. Jetspeed provides 
one or more default implementations.

The security service works with a set of interfaces to define the 
standard, base security object model in a portal server.
Depending on which security services you implement, you will need to 
replace the default implementations of these objects with your own.
These objects are:

  Interface
Description

JetspeedUser
Defines the minimal attributes of a user in the portal system.

Role
Defines the minimal attributes of a role in the portal system.

Group
Defines the minimal attributes of a group in the portal system.

Permission
Defines the minimal attributes of a permission in the portal system.

Finally, to "plugin" your services to Jetspeed, simply change the 
JetspeedSecurity property file to point to your implementation:


########################################
# Authentication Service                #
#########################################

services.PortalAuthentication.classname=org.apache.jetspeed.services.sec 
urity.turbine.TurbineAuthentication

#########################################
# Authorization Service                 #
#########################################

services.PortalAccessController.classname=org.apache.jetspeed.services.s 
ecurity.registry.RegistryAccessController
#services.PortalAccessController.classname=org.apache.jetspeed.services. 
security.turbine.TurbineAccessController
#services.PortalAccessController.classname=org.apache.jetspeed.services. 
security.nosecurity.NoSecurityAccessController

#########################################
# User Management Service               #
#########################################

services.UserManagement.classname=org.apache.jetspeed.services.security. 
turbine.TurbineUserManagement

#########################################
# Role Management Service               #
#########################################

services.RoleManagement.classname=org.apache.jetspeed.services.security. 
turbine.TurbineRoleManagement

#########################################
# Group Management Service              #
#########################################

services.GroupManagement.classname=org.apache.jetspeed.services.security 
.turbine.TurbineGroupManagement

#########################################
# Security Cache Service                #
#########################################

services.SecurityCache.classname=org.apache.jetspeed.services.security.S 
ecurityCacheImpl



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Reply via email to