Introduction to Acegi Article @ Javalobby.org

[matthew]

For those just starting with Acegi, I wrote an introductory article series for http://javalobby.org . Part 1 of the series is online now at http://www.javalobby.org/articles/ac...rity/part1.jsp

Please feel free to leave feedback. I will try to incorporate it in part 2.


Cheers,
Matthew

[Ben Alex]

It's a good article explaining Authentication and web URI request authorization, well done Matthew. Look forward to part #2 dealing with method invocation security and the recently expanded ACL capabilities (guess we'd better make a release before part #2 so people can try out the new ACL features).

Cheers
Ben

[danilo_lr]

Features llike method invocation secutity and instance level security are avaliable on the current distribuition or only on the CVS version ?

[Ben Alex]

Method invocation security and domain object instance security (ie ACL services) have been available since version 0.1 and 0.6 respectively. In CVS, which is going to be 0.7, we have extensively expanded ACL services. If you're looking to push ACLs to their maximum, checkout CVS and take a look at the improved Contacts Sample which now features the new ACL services. If you're mostly just using method invocation security, I'd wait for a formal 0.7 release to make the switch, as it will be fully documented then.

[j2ux]

It would be good to deal with features not covered by existing documentation like locking of users, etc.

This article just repeats what's already available. But it's a nice summary.

[twicet]

It would be good to deal with features not covered by existing documentation like locking of users, etc.

This article just repeats what's already available. But it's a nice summary.

+1

[Ben Alex]

Let's not forget a summary is exactly what communities like JavaLobby look for, as it increases awareness and high-level understanding without the verbosity of "normal" documentation. :-)

We've now got a Maven build system in operation (http://acegisecurity.sourceforge.net) so it is very easy for people to contribute one-off articles on specific topics such as locking users. Alternatively, such things could go straight into an FAQ perhaps with a link to the forum question where it was typically answered.