Introduce Authentication and Authorization
Reported by Ben Hood | June 28th, 2011 @ 12:07 PM
We need to be able to authenticate and authorize users to the UI (and the underlying the REST calls). Here are some of the features we may need:
- Authenticate via internal users database (may require password recovery);
- Authenticate via LDAP/AD;
- Support for different roles (admin vs. non-admin)
- Restrict access to certain groups;
- Restrict access to certain pairings;
- ..... ?
This ticket can potentially get split into two separate tickets, i.e. one for pure authentication and one for authorization, if this makes things more practical to implement.
Comments and changes to this ticket
-
Paul Jones August 23rd, 2011 @ 07:32 AM
- State changed from “new” to “open”
- Assigned user set to “Paul Jones”
-
Ben Hood August 23rd, 2011 @ 11:15 AM
(from [4864c1bf50a0238d1fd959b4b4d12e0041e4ff1d]) [#268] Initial wiring of spring security. https://github.com/lshift/diffa/commit/4864c1bf50a0238d1fd959b4b4d1...
-
Ben Hood August 23rd, 2011 @ 12:10 PM
(from [be2d7480db23a78be7d2c6e34303ada6019fb4f2]) [#268] Provide credentials from clients to allow integration tests to pass. https://github.com/lshift/diffa/commit/be2d7480db23a78be7d2c6e34303...
-
Ben Hood August 23rd, 2011 @ 10:53 PM
(from [173f105c934464e1f326c91fbff23415d2d99ae2]) [#268] Load user information from the database, not a static store. https://github.com/lshift/diffa/commit/173f105c934464e1f326c91fbff2...
-
Ben Hood August 24th, 2011 @ 01:51 AM
(from [0edc2c81292e9e320084ee6a58933b42d9048275]) [#268] Add passwords and superuser status to database. https://github.com/lshift/diffa/commit/0edc2c81292e9e320084ee6a5893...
-
Ben Hood August 24th, 2011 @ 02:07 AM
(from [ea63b598bf244c791c498d3f30e2ffde30154a09]) [#268] Add test to ensure that domain membership is required to access domain configuration. https://github.com/lshift/diffa/commit/ea63b598bf244c791c498d3f30e2...
-
Ben Hood August 24th, 2011 @ 02:27 AM
I feel that it would be better to have #348 land on master before this patch goes in.
-
Ben Hood August 24th, 2011 @ 02:27 AM
(from [0106b5765b7a3e310eedc844ee3940ae27446542]) [#268] Fix ExampleEventFormatMapperIntegrationTest by providing credentials on XML upload. https://github.com/lshift/diffa/commit/0106b5765b7a3e310eedc844ee39...
-
Paul Jones August 24th, 2011 @ 02:29 AM
How active is #348? I can try to tackle that today if no-one else is actively working on it.
-
Ben Hood August 24th, 2011 @ 02:43 AM
(from [6539405c2067020530e02ee86fea77226420bb72]) [#268] Allow participant demo to upload config again. https://github.com/lshift/diffa/commit/6539405c2067020530e02ee86fea...
-
Ben Hood August 24th, 2011 @ 03:05 AM
I shouldn't think it will be touched at least for another 8 hours, and
then if then, maybe only with a 50% chance of it happening today. Take
it if you think it is small enough. -
Paul Jones August 24th, 2011 @ 07:39 AM
Once [#348] is merged (and this branch updated), I think this ticket would be in a state ready for consideration of an initial merge. It is missing quite a few features listed in the original list, but should provide a good basis.
-
-
Paul Jones August 24th, 2011 @ 12:05 PM
- State changed from “open” to “resolved”
- Assigned user changed from “Paul Jones” to “Ben Hood”
Ready for initial QA.
-
Ben Hood August 24th, 2011 @ 12:26 PM
(from [71cd81df3a022659d9f43c7fdafff885b9787fdd]) [#268] Remove Prototype Scope marker, as this isn't necessary now cglib is available. https://github.com/lshift/diffa/commit/71cd81df3a022659d9f43c7fdaff...
-
Ben Hood August 24th, 2011 @ 02:12 PM
- State changed from “resolved” to “open”
- Tag changed from “access control” to “access control, authentication”
- Assigned user changed from “Ben Hood” to “Paul Jones”
- Milestone cleared.
- Milestone order changed from “6” to “0”
This patch looks fine, though I've raised two questions in the pull request.
-
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
A Real Time Differencing Tool.
Ben Hood