From graffito-dev-return-1279-apmail-incubator-graffito-dev-archive=www.apache.org@incubator.apache.org Thu Sep 07 15:05:10 2006 Return-Path: Delivered-To: apmail-incubator-graffito-dev-archive@www.apache.org Received: (qmail 8265 invoked from network); 7 Sep 2006 15:05:10 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 7 Sep 2006 15:05:10 -0000 Received: (qmail 37912 invoked by uid 500); 7 Sep 2006 15:05:09 -0000 Mailing-List: contact graffito-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: graffito-dev@incubator.apache.org Delivered-To: mailing list graffito-dev@incubator.apache.org Received: (qmail 37901 invoked by uid 99); 7 Sep 2006 15:05:09 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Sep 2006 08:05:09 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=UNPARSEABLE_RELAY X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [192.18.19.7] (HELO sineb-mail-2.sun.com) (192.18.19.7) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Sep 2006 08:05:08 -0700 Received: from fe-apac-04.sun.com (fe-apac-04.sun.com [192.18.19.175] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k87F4kRD000761 for ; Thu, 7 Sep 2006 23:04:47 +0800 (SGT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-4.02 (built Sep 9 2005)) id <0J5800F019PB0100@mail-apac.sun.com> (original mail from Ruchi.Goel@Sun.COM) for graffito-dev@incubator.apache.org; Thu, 07 Sep 2006 23:04:46 +0800 (SGT) Received: from [192.168.2.100] ([125.22.44.84]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-4.02 (built Sep 9 2005)) with ESMTPSA id <0J5800GH99VUXA20@mail-apac.sun.com> for graffito-dev@incubator.apache.org; Thu, 07 Sep 2006 23:04:46 +0800 (SGT) Date: Thu, 07 Sep 2006 20:34:41 +0530 From: Ruchi Goel Subject: Re: technologies used in graffito In-reply-to: <3b728ee90609070724g4d71784p5a3e3978945c42b4@mail.gmail.com> Sender: Ruchi.Goel@Sun.COM To: graffito-dev@incubator.apache.org Message-id: <45003509.3000201@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <450005F6.1080802@sun.com> <3b728ee90609070519v2b21d003jbb50b77dd7d5e65f@mail.gmail.com> <45001ADC.10401@sun.com> <3b728ee90609070724g4d71784p5a3e3978945c42b4@mail.gmail.com> User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923) X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Thanks . I will do some homework on Security part and come back with right questions. But some more inline against your response..... Christophe Lombart wrote: > On 9/7/06, Ruchi Goel wrote: > >> Thanks Christophe for quick response. One more question: Who is using >> spring framework ? - Jetspeed or Graffito ? > > > Both project > > >> Please see inline for more .... >> Christophe Lombart wrote: >> >> Our portal users are stored in LDAP and uses its authentication service >> . How will that be mapped to JAAS users ? >> > > see the J2 security doc to get all the details > (http://portals.apache.org/jetspeed-2/multiproject/jetspeed-security/index.html). > > Remember that this security service can be run outside J2. > > Anyway I'm open to see together how we can support other kind of > integration (with other security services/solution). > >> You mean to say , Graffito security service can have portal specific >> implementation ? > > > Yes but some refactoring is required. The security services are not > well defined. > >> If we use only OCM , do I still get it ? I see >> SimpleAccessManager and SimpleLoginModule which uses Jackrabit and java >> security services. This security is at repository level , I want to also >> understand security at portal level, "who can see which portlets " ? >> > > The current solution is not correct if the security is defined at the > repository level. > > >> The question is if we want to integrate the entire cms framework , we >> will have to use the abstractions , even though the jsr170 mapping >> layer helps with lots of services.Please correct me if my >> understanding is wrong here. >> > Correct. JSR170 is focusing only on the repository aspect. This is > not a complete CMS/DM solution. Other services are still necessary > (eg. workflow). > We plan to add more and more services (scheduler, workflow, > replication, ...) but that's the future :-) > >> Where is Spring framework used ? I understand that u have ocm 's one >> integration with Spring? Does Graffito internally uses it ? > > > The Graffito services are running in a Spring container (see in > components). > If you want to use OCM outside the complete Graffito stack, you can > run it in a Spring container (see in jcr/spring). Can I not use OCM outside Spring container ? For simple persistence and query operations, I built and tried storing my model supported by my mapping file without using any container. Can I not use OCM with portal deployed on j2ee container ? As far as I understand Spring container is a light weight container . Is OCM dependent on spring framework to implement any of its services ? > >> We cannot integrate with any open source which is not j2ee compliant. >> > why not ? > maybe later ...it will depend on the community ;-) > > :) I am trying my best now .. > >> Another question : Where is Velocity used in graffito project ? >> > > In the portlets (instead of jsp). > > graffito portlets use jsp , but graffito browser use velocity templates, right . I don't think use of velocity templates is any problem wrt j2ee compliance. Thanks, Ruchi