Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Modeling » EMF » [CDO] Authentication OK, but what about authorization(How can we have authorization configuration whithin CDO 2.0 ?)
[CDO] Authentication OK, but what about authorization [message #521014] Tue, 16 March 2010 04:39 Go to next message
Sabri Skhiri is currently offline Sabri Skhiri
Messages: 43
Registered: February 2010
Member
Hi,

I am trying to implement an authorization and authentication mechanism on CDO 2.0.
For the authentication I found a faq on Net4J web site [1] for defining our own PasswordCredentialsProvider. By taking a look at the Credential definition, we can see that we just define user ID and password, then, that's OK for authentication.

But concerning the authorization, I mean defining for a specific user ID the list of resources or types of objects he can access, or more generally the list of permissions he has, I found nothing.

Do you know if such mechanism exist in CDO 2.0 ?

Thank you,

Sabri.

[1] Net4J Faq: http://wiki.eclipse.org/FAQ_for_CDO_and_Net4j#How_can_I_use_ authentication.3F
Re: [CDO] Authentication OK, but what about authorization [message #521038 is a reply to message #521014] Tue, 16 March 2010 05:39 Go to previous message
Eike Stepper is currently offline Eike Stepper
Messages: 5481
Registered: July 2009
Senior Member
Am 16.03.2010 09:39, schrieb Sabri Skhiri:
> Hi,
> I am trying to implement an authorization and authentication mechanism
> on CDO 2.0.
> For the authentication I found a faq on Net4J web site [1] for
> defining our own PasswordCredentialsProvider. By taking a look at the
> Credential definition, we can see that we just define user ID and
> password, then, that's OK for authentication.
Note that in CDO 3.0 we have an additional, superior athentication
mechanism per CDOSession (not only on Net4j IConnector level). Search
this newgroup for "authen..." if you need hints.

>
> But concerning the authorization, I mean defining for a specific user
> ID the list of resources or types of objects he can access, or more
> generally the list of permissions he has, I found nothing.
See 277075: Access Control system in CDO
https://bugs.eclipse.org/bugs/show_bug.cgi?id=277075

>
> Do you know if such mechanism exist in CDO 2.0 ?
Yes, it doesn't ;-)

But you might be able to implement your own using custom
IRepository.ReadAccessHandler and IRepository.WriteAccessHandler.

Cheers
/Eike

----
http://thegordian.blogspot.com
http://twitter.com/eikestepper


>
> Thank you,
>
> Sabri.
>
> [1] Net4J Faq:
> http://wiki.eclipse.org/FAQ_for_CDO_and_Net4j#How_can_I_use_ authentication.3F
>
Previous Topic:Extended Metadata not working on loading a model
Next Topic:Default options and Resource#load
Goto Forum:
  


Current Time: Mon Jul 28 06:33:57 EDT 2014

Powered by FUDForum. Page generated in 0.02096 seconds