Re: [Acegisecurity-developer] Security Annotation support (initial)

2005-08-21 Thread Ben Alex
Mark St.Godard wrote: I just wanted to make sure I dont check in code that breaks JDK 1.4 users from building the CVS HEAD examples, etc. Therefore to sum up: - can we package the core-tiger classes into the single acegi security dist? - where should the new samples (for java5) be located?

Re: [Acegisecurity-developer] Security Annotation support (initial)

2005-08-21 Thread Mark St.Godard
Hey Ben, Just wanted to mention, I have started converting over the "attributes" sample apps over to Java 5 annotations version. (Havent checked in yet) samples/attributes (Commons) samples/annotations (Java 5) Basically, I ported over the BankService code and created tests. Also, I did port o

Re: [Acegisecurity-developer] Event not firing from DaoAuthenticationProvider.java

2005-08-21 Thread Mark St.Godard
Hi Ben, (welcome back :) Great, the isAuthenticated() is the exact key we need to determine this particular even, irrespective of the cache. I also agree that it should not be in the AuthenticationProviders... Ben, I created a JIRA entry for this (SEC-50), you can assign to me if you want. Che

Re: [Acegisecurity-developer] SEC-15 User security context switching

2005-08-21 Thread Mark St.Godard
Ben, Sure thing, thanks for the feedback, will do. Cheers, Mark On 8/21/05, Ben Alex <[EMAIL PROTECTED]> wrote: > Mark St.Godard wrote: > > >I did some local testing with the Contacts sample and did some simple tests > >of > >- logging in (i.e. User 1) > >- going to /secure/debug.jsp (view Use

[Acegisecurity-developer] SEC-6 Spring Rich integration with Acegi Security

2005-08-21 Thread Ben Alex
For some time Spring Rich has been using an old version of Acegi Security. I have just updated Spring Rich CVS HEAD to work with Acegi Security 0.9.0-SNAPSHOT. The Petclinic sample demonstrates this. The JIRA issue has been closed: http://opensource.atlassian.com/projects/spring/browse/SEC-6

Re: [Acegisecurity-developer] Acegi error on Sun Java Enterprise Server 8.1

2005-08-21 Thread Ben Alex
Clarence Ho wrote: java.lang.ClassCastException: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken Most ClassCastExceptions are caused because there's an extra acegi-security-*.jar on your classpath. It should only be inside your WAR's WEB-INF/lib directory. Cheers Ben

Re: [Acegisecurity-developer] Webwork2+Acegi j_acegi_security_check redirection problems

2005-08-21 Thread Ben Alex
Jared Odulio wrote: Hi Ben, Yes, I managed to fix it. I have taken some notes too: http://jaredtech.blogspot.com/2005/08/webworkvelocityacegi-config.html I am if this is case works for others but it worked for me. Hi Jared I added your blog entry to our "articles" page to help others find

Re: [Acegisecurity-developer] cannot access cvs

2005-08-21 Thread Ben Alex
Tim Kettering wrote: Same here – cannot access CVS since yesterday. I guess SF is messed up… again. SF have been upgrading CVS - again. I had problems last week as well, but it's fine now. Cheers Ben --- SF.Net email is Sponsored by the

Re: [Acegisecurity-developer] using long for acegi acl id parameters

2005-08-21 Thread Ben Alex
Tim Kettering wrote: I’m wondering if there was a reason that most of Acegi’s standard ACL classes use int when dealing with object id values. We usually default to using ‘long’ instead of ‘int’ – and I believe that other places do as well, so it seems to me that it might be simpler to use ‘lo

Re: [Acegisecurity-developer] synchronization bug in FilterToBeanProxy: Not yet fixed

2005-08-21 Thread Ben Alex
Malzahn Volker , Köln wrote: So I would suggest to choose solution 2.). Hi Volker Well spotted, I've fixed in CVS (using solution 2). Cheers Ben --- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 20

Re: [Acegisecurity-developer] Odd authentication behaviors

2005-08-21 Thread Ben Alex
Sergio Bossa wrote: Moreover, have you considered my first point? Why does Acegi try to re-authenticate the user, even if it is already authenticated? And why does this happen only sometimes? Hi Sergio Would you please advise if you are using CVS HEAD, as it contains a number of improve

Re: [Acegisecurity-developer] Security Annotation support (initial)

2005-08-21 Thread Ben Alex
Mark St.Godard wrote: Ben et al, Just a note, I have checked in some initial Security annotation support and unit tests. Feedback is always welcome, and please let me know if anyone has any problems with the new subproject. Great work Mark. Are there any users out there using Acegi Sec

Re: [Acegisecurity-developer] missing voting facilities?

2005-08-21 Thread Ben Alex
Andy Depue wrote: I wonder, though, if the ACL functionality would be a better solution for this sort of thing? The Voter we created below was just a quick hack, really. The BasicAclVoter is designed to locate the first domain object argument in a method invocation, and then lookup the ACL

Re: [Acegisecurity-developer] SEC-15 User security context switching

2005-08-21 Thread Ben Alex
Mark St.Godard wrote: I did some local testing with the Contacts sample and did some simple tests of - logging in (i.e. User 1) - going to /secure/debug.jsp (view User 1 info) - going to a jsp that handles the switch (i.e. switchUser.jsp) - submit request to 'su' to another user (i.e. User 2)

Re: [Acegisecurity-developer] Event not firing from DaoAuthenticationProvider.java

2005-08-21 Thread Ben Alex
Mark St.Godard wrote: The HttpSessionContextIntegrationFilter should be able to set some sort of indicator that this is the first logon attempt since it generates a new SecurityContext however this wouldnt work for remote client authentication? IMHO we should modify all event-aware Authen

Re: [Acegisecurity-developer] LDAP Dao Status

2005-08-21 Thread Ben Alex
Robert r. Sanders wrote: After a couple false starts which in retrospect I shouldn't have checked into the CVS HEAD, I have finally cleaned up the code and gotten an updated version of the LDAPPasswordAuthenticationDao, along with a unit test, into the CVS HEAD. I will post a similar message

Re: [Acegisecurity-developer] Webwork2+Acegi j_acegi_security_check redirection problems

2005-08-21 Thread Jared Odulio
Hi Ben, Yes, I managed to fix it. I have taken some notes too: http://jaredtech.blogspot.com/2005/08/webworkvelocityacegi-config.html I am if this is case works for others but it worked for me. Ben Alex wrote: Jared Odulio wrote: Hi Mark, Thanks, I've registered already. So while waiting

Re: [Acegisecurity-developer] Webwork2+Acegi j_acegi_security_check redirection problems

2005-08-21 Thread Ben Alex
Jared Odulio wrote: Hi Mark, Thanks, I've registered already. So while waiting for the activation email to arrive. I am going to post a few more info. I am using Acegi Security version 0.9.0 Snapshot that I build myself. I am running the Contact Sample and my application in Sun Java System A

Re: [Acegisecurity-developer] Blog entry acegi. Need review.

2005-08-21 Thread Ben Alex
Pascal Gehl wrote: I've made an entry in my blog on acegi. Hi Pascal I've added your blog entry to the Acegi Security "articles" page. Cheers Ben --- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 20