Thanks for the response! If I go ahead with this, my plan is to mimick a good idea that Ben Alex had for his Acegi Security framework, which is to create an adapter that would implement the store interfaces (like JNDIPrincipalStore does), but translate and delegate to a simplified DAO that one could implement for various security backends. It is easy to adapt Acegi to your own security system because all you have to do is implement a simple DAO interface from Acegi - the same should be possible for Slide. As I look over the JNDIPrincipalStore implementation I can see there is a lot of Slide specific API "protocol" going on that I'm going to have to parse. A simple DAO interface would make this much easier. I'm not sure what the DAO interface is going to look like yet (it will be read only at this point, like the JNDIPrincipalStore), but it sure would be nice to have something as simple as this: Collection getUsers(... some sort of Slide related criteria ...) Collection getUserRoles(String username) It seems like such a common thing people want to do, it is will worth the effort of creating this interface. Well, I'm off to parse the Slide API... any tips are appreciated. :)
- Andy On Tuesday 08 February 2005 07:00 pm, Carlos Villegas wrote: > Andy Depue wrote: > > None of these options seem very palatable to me. Am I missing something? > > Does Slide really not provide an easy way for me to supply it with the > > currently authenticated user AND his/her roles? To me, the ideal > > solution would be to hand Slide a preauthenticated token of some sort > > that says, "I've already authenticated this guy and vouch for him - oh, > > and btw, these are the roles he is granted." > > Any information or help in this area is greatly appreciated! > > No, there doesn't seem to be an easy way. You'll need to write your own > store. You can take a look at the JNDIPrincipalStore which is close to > what you want to do; it retrieves users and roles from an LDAP directory. > > There was an idea of writing a store that retrieves users and roles from > a JAAS LoginModule which is a standard way to plugin different > authentication systems. However, there are issues about how to map the > WebDAV model to JAAS. JAAS handles authentication but it doesn't seem to > provide a way to list all users and roles, which is needed by Slide. > Anyway, I may take a look at this later, but I don't know when I'll be > able to do that. > > Carlos > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
