Maybe we should do a new thread for the security stuff so we don't derail this one.

Having talked to some of the Seam Contributors here at JBoss World / Red Hat Summit it seems like a lot of them aren't quite sure how to get the discussions started for their previous Seam modules, especially since many of them target EE apis (I'm ccing the Seam dev list so hopefully those who may not be following DeltaSpike dev will see this). That is a large part of where this sandbox idea came from. If we want to create a new Apache repo, or another sub directory in our current repo, or perhaps even different branches for this work I'm fine. However, I do agree that getting too many topics going all at once is bad. That happened in Seam and we were overloaded. Perhaps we should create some sort policy for getting these ideas in if they're not on the current roadmap. I'm not sure if any of really know when we'll be tackling some of the EE stuff. Next release, release after that one? I really don't want to lose these people and see DeltaSpike stagnate with only a few developers doing it in their spare time.

On Thu, Jun 28, 2012 at 12:35 PM, Mark Struberg <struberg@yahoo.de> wrote:
Oh yea, that was my fault. I was on a conference earlier that week and overlooked his mail. Found it now.


Shane, what is the direction you working on? What are the basic ideas and what shortcomings did you identify while doing the review?
I'm not sure if it wouldn't be better we would make that work directly in the deltaspike main repo. There are lots of other people looking at the repo and we got many questions regarding security already. And not being able to point people to a canonical repo which contains the latest stuff...

Btw, welcome Bolek! We've talked on IRC already a few times. Would be great if you could introduce yourself with a few words and also if we move the technical discussions from IRC more to email. This is much easier to follow for people in different timezones. And it will also raise visibility and make people aware that there is a new face working on DeltaSpike :)



There is a general ASF rule "If it isn't on the list, it didn't happen".

Using IRC or even skype calls is fine for _additional_ ad hoc communication, but it must not lead to 'silently' doing things without having conversation on the list. IRC is just not a mail archive which can get scanned easily.


txs and LieGrue,
strub



----- Original Message -----
> From: Jason Porter <lightguard.jp@gmail.com>
> Sent: Thursday, June 28, 2012 6:20 PM
> Subject: Re: Sandbox for DeltaSpike
>
> On Thu, Jun 28, 2012 at 6:06 AM, Mark Struberg <struberg@yahoo.de> wrote:
>
>>  But if we don't talk about that stuff at all, then there will be no
>>  visibility and no progress neither.
>>
>>  There is really no problem with spreading out parallel topics, IF there
>>  are people interested in contributing.
>>
>>
>>  What I do _not_ like to have is starting with 15 different topics and not
>>  finishing anything!
>>
>>  Btw, what is the state of deltaspike-security?
>>
>>  I have no clue about it nor did I do any review. I've also not seen any
>>  commit lately.
>>
>>  Who is working on that? Or is noone working on it at all?
>
>
> https://github.com/sbryzak/DeltaSpike/tree/security
>
> I believe Shane has been working on it apparently, but there hasn't been
> much discussion.
>
>
>>   LieGrue,
>>  strub
>>
>> 



--
Jason Porter
http://lightguard-jp.blogspot.com
http://twitter.com/lightguardjp

Software Engineer
Open Source Advocate
Author of Seam Catch - Next Generation Java Exception Handling

PGP key id: 926CCFF5
PGP key available at: keyserver.net, pgp.mit.edu