Changes between Version 11 and Version 12 of BluePrintAuthenticationAccess

Timestamp:

01/08/09 20:11:05 (16 years ago)

Author:

Fran Boon

Comment:

--

BluePrintAuthenticationAccess

@@ -1 +1 @@
 This page hosts the detailed specification for the [https://blueprints.launchpad.net/sahana3/+spec/authentication-authorization Blueprint for the Authentication & Access].
+
+Authentication is the process that verifies the identity of a user.[[BR]]
+Authorization provides controlled access to protected resources.
 
 S3 currently uses the default T2 AAA system at a very basic level: {{{t2.logged_in}}}
  * http://trac.sahana3.org/wiki/DeveloperGuidelinesAuthenticationAccess
 
-However this won't be appropriate for all deployment scenarios.
+However this won't be appropriate for all deployment scenarios.[[BR]]
+ * The main issue is that the current system supports self-registration...can easily diasble that to enforce manual user setup, which /can/ just be via appadmin (low priroity to make a nicer UI)
+
+We need to extend to User Roles.
+
+We need to extend to Data Security.
+
 The specification we should be working to implement is in the Wiki:
  * Proposed Trunk: http://wiki.sahana.lk/doku.php?id=dev:new_acl
@@ -30 +39 @@
  * appadmin protected in the same way :)
 
+ * Working with Realms, Users, Groups, and Roles: http://java.sun.com/javaee/5/docs/tutorial/doc/bnbxj.html
+
 ----
 BluePrints