| Eclipse-JAAS: RCP security framework kind-of available [message #49634] |
Thu, 01 September 2005 08:59 |
Eclipse User |
|
|
|
Originally posted by: neil.integility.com
This is a follow-up to my earlier announcement about the RCP security
framework I have been working on. I have created a project on Sourceforge
called eclipse-jaas and checked in the initial code. There are no
downloads yet, so if you're interested in an early preview you will have
to get an anonymous CVS checkout.
Here's a high-level summary of the features:
* Uses JAAS for authentication. Any combination of LoginModule and
CallbackHandler can be configured through plugin extensions, allowing for
a high degree of choice in authentication technologies (i.e. anything from
simple username/password through smartcards and fingerprints scanners).
* Authorization at the plugin level. Currently, this is all-or-nothing
authorization, i.e. users get the whole plugin or nothing. This works well
in some applications where you can cluster related business functions into
plugins. However I acknowledge that some applications will need
finer-grained control; this is something I'm investigating at the moment.
The project page is at http://sourceforge.net/projects/eclipse-jaas,
follow the CVS link for instructions on obtaining the code through
anonymous CVS.
There is some VERY rudimentary documentation in the README.TXT inside the
module net.sourceforge.eclipsejaas. Here is a quick link via ViewCVS:
http://cvs.sourceforge.net/viewcvs.py/eclipse-jaas/net.sourc eforge.eclipseja
as/README.TXT?view=markup
I'd suggest that further discussion of generic requirements for security
in an RCP application should remain in this newsgroup, but please post
anything specific to Eclipse-JAAS in the Sourceforge forums.
Kind regards,
Neil Bartlett
|
|
|
Powered by
FUDForum. Page generated in 0.03868 seconds
] 
Search
Help
Register
Login
Home
