HI felix: Glad to recieve your answer , I think it's important for a content manager system to have authentication control. If there is no authenticatioin control , user management will be less useful. I think the users of sling really hope sling can add the authentication's function early. waiting ...
thanks. 2009-03-02 yanjie 发件人： Felix Meschberger 发送时间： 2009-02-28 05:03:18 收件人： sling-dev 抄送： 主题： Re: How can I realize authentication in sling? Hi, yanjie schrieb: > Hi everyone: > I want to give a user some policy to handle a node(read or write or modify..) > , and other users don't have the policy . Or a group has the policy and the > users in the group all have the authentication . how can I use sling to > realize it? Sling employs the authentication and access control functionality of the underlying JCR repository (Jackrabbit by default). So you have to create users and groups in Jackrabbit (I have applied the SLING-875 patches by Eric Norman today to enable user/group management in Sling. In addition you have to set access control in the repository. This is more problematic at the moment because Jackrabbit 1.5 embedded in Sling only contains partial support for JSR-283 (aka JCR 2.0) access control support. Maybe others on the list are more knowledgeable in this respect... Regards Felix
