<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="http://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Security integration for JCA 1.6
</h3>
<span style="margin-bottom: 10px;">
created by <a href="http://community.jboss.org/people/jesper.pedersen">Jesper Pedersen</a> in <i>JCA Development</i> - <a href="http://community.jboss.org/message/540410#540410">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>Scott, if you have time to take a look at the security requirements for the JCA 1.6 implementation that would be great.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Here are a couple of pointers to get started</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><ul><li>Chapter 16 in the specification - it describes requirements plus use-cases</li><li>Investigate security infrastructure in AS/trunk to align requirements</li><li>Create a deisgn for a simple security domain for the standalone project</li><li>Start with a test case where a Work instance uses a SecurityContext</li><li>and build from there</li></ul><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>There are a couple of other requirements, since this is one of the big integration points for the project</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><ul><li>Test cases covering the use-cases described</li><li>A chapter in the JCA Developer Guide describing the setup and integration</li></ul><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Keep in mind that this is one of the places where we need an internal SPI such that we can integrate with the standalone setup and the setup used in JBoss Application Server.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>You <em>can</em> take a look at the security integration in the current JCA implementation inside AS, but I want a clean design with well-defined integration points - and a documented way of locating the needed information.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>For the first implementation of the SPI for the standalone part I would suggest that you start with a simple setup using properties files - similar to the UsersRolesLoginModule idea in JBossSX. And then build from there... The principal mapping tool could just be a file too...</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>And start with the requirements for the WorkManager (watch out for nested Work submissions with different SecurityContexts) - and save the MessageEndpoints for later.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>The code should be located in the core/ module - and feel free to use EmbeddedJCA and the ShrinkWrap support for the test cases.</p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="http://community.jboss.org/message/540410#540410">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JCA Development at <a href="http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2099">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>