Integrate Servlet Security with DNA ExecutionContext
----------------------------------------------------
Key: DNA-440
URL:
https://jira.jboss.org/jira/browse/DNA-440
Project: DNA
Issue Type: Sub-task
Affects Versions: 0.4
Reporter: Brian Carothers
Fix For: 0.6
The DNA JCR security approach is JAAS-based and relies on the ability to pass a
LoginContext, AccessControlContext, or SimpleCredentials (which are used internally to
create a LoginContext) to the ExecutionContext. The Servlet specification does not expose
any of these. The REST server is mandatorily limited to what the Servlet specification
provides. There needs to be some sort of integration between the Servlet-based REST code
and JAAS-based DNA implementation to allow authorization and access to JCR resources to
occur based on web credentials.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira