portals-jetspeed-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Phillip Rhodes <phil...@rhoderunner.com>
Subject Re: JS Groups-Roles-Permissions
Date Tue, 04 Dec 2001 22:14:11 GMT

Hey I am ready to get going on the enhanced security model.

I am going to read the proposed security model referred to below.  Should 
we do the security changes within the context of the turbine project, or in 

Who else is interested in participating?  Should we take future discussions 

Ripping to go!

At 09:28 AM 11/28/2001 -0800, David Sean Taylor wrote:
>We did some work on the Jetspeed security features a while back:
>- added role-based security for registry entries
>- security maintenance portlets for users, roles, groups
>- permission checks to access portlets
>One thing I personally find outstanding is that we could add better secured
>access to psml pages.
>Others on the list have had proposals about how security 'should' work, but
>its often difficult to find a consensus. The role-based security approach
>based on the turbine security model has some loopholes. I believe a better
>security model would be one like the one described in the security proposal
>by the SAP developers in the cvs under /proposals/0004.txt.
>(I just read that SAP bought TopTier - a commercial portal )
>however the proposed security model would take a larger development effort.
>----- Original Message -----
>From: "ICM S Op Guest 5" <ICM-S-OP.guest-5@icn.siemens.de>
>To: "Jetspeed Users List" <jetspeed-user@jakarta.apache.org>
>Sent: Wednesday, November 28, 2001 7:55 AM
>Subject: JS Groups-Roles-Permissions
> > Hi,
> >
> > is there anybody working on these?
> > Is there a scheme or a structure available which shows how this is
>planned/should be implemented for/into jetspeed?
> >
> > Andreas
> >
> > --
> > To unsubscribe, e-mail:
> > For additional commands, e-mail:
> >
> >
>To unsubscribe, 
>e-mail:   <mailto:jetspeed-user-unsubscribe@jakarta.apache.org>
>For additional commands, e-mail: 

To unsubscribe, e-mail:   <mailto:jetspeed-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:jetspeed-user-help@jakarta.apache.org>

View raw message