Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@jackrabbit.apache.org
Received-SPF: pass (athena.apache.org: domain of justinedelson@gmail.com
 designates 74.125.82.170 as permitted sender)
MIME-Version: 1.0
Sender: justinedelson@gmail.com
In-Reply-To: 
 <CACzCxU8CGWD_JOphbQUPZgUD5Ej8OGnb+uUgSkgmQ1fcR6agtQ@mail.gmail.com>
References: 
 <CACzCxU9W8PYCp20ZxtsvE-QqOBS4i6sT3vQFSoK_9m9FauaKQQ@mail.gmail.com>
	<CAGE+jALbTY9mQrPWZpMraBRU9gtYaD6aFB13u6jwmkspygqbvg@mail.gmail.com>
	<CAFxXJURrpSbdR6zsWkyrMiZY2Mt9j_WFa0OophQFNV7jkd=B5A@mail.gmail.com>
	<CAOAO1SgL-Mj5SUP=wMRB0uQjXKByHEuC7G0R1hVAX=_tvOV1mA@mail.gmail.com>
	<CACzCxU8CGWD_JOphbQUPZgUD5Ej8OGnb+uUgSkgmQ1fcR6agtQ@mail.gmail.com>
Date: Fri, 21 Oct 2011 10:41:34 -0400
Message-ID: 
 <CAOAO1SjLv+dQ2=1K0spp2pTnCitaoo72tMwFR=9nwbk0dyX5tw@mail.gmail.com>
Subject: Re: Is it possible to have multiple repositories in one web app?
From: Justin Edelson <justin@justinedelson.com>
To: users@jackrabbit.apache.org, ardamangrewal@gmail.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

It is a universal truism that for security to work, you have to do it
correctly :)

On Fri, Oct 21, 2011 at 10:26 AM, Ardaman Grewal
<ardamangrewal@gmail.com> wrote:
> Thanks for the replies so far, appreciate it.
>
> One of the reason for multi-subscriber/multi-repository, is the system wi=
ll
> be a multi-tenant system. Managing access just via security will involve
> quite a bit of security and access management. And you have to get it rig=
ht
> so you don't allow subscriber A to look at subscriber B's data. Also, whe=
n
> you turn on versioning, that is repo global, therefore more security
> management.
>
>
> On Fri, Oct 21, 2011 at 9:09 AM, Justin Edelson <justin@justinedelson.com=
>wrote:
>
>> Indeed, but that's not to say that a repository per subscriber is :)
>> Access Control is the way to do what you want to do.
>>
>> That said, AFAIK, there's no reason you can't have multiple
>> repositories per VM as long as each point to a different directories
>> and (if you're using a database-backed pm) different table spaces.
>> It's just not typical and seems very heavyweight for what you want to
>> do.
>>
>> Justin
>>
>> 2011/10/21 Fabi=E1n Mandelbaum <fmandelbaum@gmail.com>:
>> > I thought that different-workspaces-for-each-subscriber (read: user)
>> > was discouraged by David's Model Rule #3:
>> >
>> > http://wiki.apache.org/jackrabbit/DavidsModel
>> >
>> > On Fri, Oct 21, 2011 at 10:45 AM, Gustavo Henrique Orair
>> > <gustavo.orair@econoinfo.com.br> wrote:
>> >> What about using different workspaces for each subcriber?
>> >>
>> >>
>> >> 2011/10/20 Ardaman Grewal <ardamangrewal@gmail.com>
>> >>
>> >>> I am trying to design and implement a version-able document system t=
hat
>> is
>> >>> meant for multiple subscribers of the system. Data for each subscrib=
er
>> has
>> >>> to be isolated from each other. A Web app will provide REST API for =
the
>> >>> client applications to access data. Web app will also handle some of
>> the
>> >>> security and subscription aspects of the subscribing users. I have b=
een
>> >>> considering Jackrabbit for data management and versioning backed by =
a
>> >>> relational database. For the web app, thinking of hosting it in Tomc=
at.
>> >>> Hopefully, the following figure comes through properly formatted. In
>> case
>> >>> it
>> >>> doesn't, it shows a web app which layers a REST api on top of multip=
le
>> >>> (separate) JR repositories.
>> >>>
>> >>> Is this a correct approach? Is Jackrabbit intended to be used like t=
his
>> or
>> >>> am I in the weeds? Any other suggestions.
>> >>>
>> >>> Thank you very much.
>> >>>
>> >>>
>> >>>
>> >>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0+-----------+
>> >>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0| =A0 =A0 =A0 =A0 =A0 |
>> >>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0+------+ =A0 =A0 =A0 =A0 =A0 =A0| =A0=
 =A0 =A0 =A0 =A0 |
>> >>> +--------------+
>> >>> =A0 =A0 =A0 =A0+------>|Repo A|<---------->| =A0 =A0Web =A0 =A0|<---=
-----> | Subscriber
>> A |
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 +------+ =A0 =A0 =A0 =A0 =A0 =A0| =A0 =
=A0App =A0 =A0|
>> +--------------+
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 | =A0Exposes =A0|
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 | =A0 =A0REST =A0 |
>> +--------------+
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 +------+ =A0 =A0 =A0 =A0 =A0 =A0| =A0 =
=A0Svcs =A0 |<--------> | Subscriber
>> B |
>> >>> =A0 =A0 =A0 =A0+------>|Repo B|<---------->| =A0 =A0 =A0 =A0 =A0 |
>> +--------------+
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 +------+ =A0 =A0 =A0 =A0 =A0 =A0| =A0 =
=A0 =A0 =A0 =A0 |
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 | =A0 =A0 =A0 =A0 =A0 |
>> >>> =A0 =A0 =A0 =A0| =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 +-----------+
>> >>> =A0 =A0 =A0 \|/
>> >>> =A0 =A0+------------+
>> >>> =A0 =A0| one or more|
>> >>> =A0 =A0| RDMS Store |
>> >>> =A0 =A0+------------+
>> >>>
>> >>
>> >
>> >
>> >
>> > --
>> > Fabi=E1n Mandelbaum
>> > IS Engineer
>> >
>>
>