Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 15 Current »

[11:03:42 CDT(-0500)] <EricDalquist> while digging through the guest user instance code in trunk last night I had a thought for future work
[11:04:03 CDT(-0500)] <EricDalquist> it would be good to replace that boolean isGuest() method with a enum of getAuthenticationLevel
[11:04:22 CDT(-0500)] <EricDalquist> so we can directly describe things like anonymous, remember-me, single-facter, etc...
[11:08:46 CDT(-0500)] <athena> yes!
[11:09:09 CDT(-0500)] <athena> i quite agree - that was an annoyance when we talked about remember me a few years ago at yale
[11:09:11 CDT(-0500)] <EricDalquist> it would also make the checks we need to do in various places more obvious
[11:09:18 CDT(-0500)] <athena> though we'd need to think about what we do with portlets
[11:09:21 CDT(-0500)] <athena> yes
[11:09:34 CDT(-0500)] <EricDalquist> since by removing the GuestUser* stuff there are places that need a little more logic
[11:09:58 CDT(-0500)] <EricDalquist> to check and see if the user is authed at a high enough level that what they are doing should be persisted
[11:10:14 CDT(-0500)] <EricDalquist> portlet preferences already have that logic built in
[11:10:37 CDT(-0500)] <athena> was thinking more the portlet spec's isAuthenticated method?
[11:10:41 CDT(-0500)] <EricDalquist> where it stores the changes in memory instead of the DB if they are a guest
[11:10:43 CDT(-0500)] <athena> or whatever that relevant method is called
[11:11:10 CDT(-0500)] <EricDalquist> String getAuthType();
[11:12:05 CDT(-0500)] <athena> oh, there's actually a spec method for that?
[11:12:26 CDT(-0500)] <EricDalquist> yup
[11:12:30 CDT(-0500)] <EricDalquist> that is on PortletRequest
[11:12:30 CDT(-0500)] <athena> awesome!
[11:12:34 CDT(-0500)] <athena> that's great
[11:12:50 CDT(-0500)] <EricDalquist> they suggest returning stuff like FORM_AUTH, CERT_AUTH, BASIC_AUTH
[11:12:53 CDT(-0500)] <athena> this all might be interesting w/ some of the future cas plans for multi-factor auth as well
[11:12:54 CDT(-0500)] <EricDalquist> but you can return custom stuff
[11:12:54 CDT(-0500)] <athena> nice (smile)
[11:13:07 CDT(-0500)] <EricDalquist> since those are just technologies for auth
[11:13:13 CDT(-0500)] <EricDalquist> and we'd want it more for like auth-level
[11:13:55 CDT(-0500)] <EricDalquist> Returns the name of the authentication scheme used for the connection between client and portal, for example, BASIC_AUTH, CLIENT_CERT_AUTH, a custom one or null if there was no authentication.
[11:16:58 CDT(-0500)] <athena> yeah
[11:17:03 CDT(-0500)] <athena> i like it (smile)
[14:29:30 CDT(-0500)] <EricDalquist> athena: what is the name of the new jaxb based portlet definition export object?
[14:30:07 CDT(-0500)] <athena> ExternalPortletRepresentation
[14:30:12 CDT(-0500)] <EricDalquist> I have all the compile and test errors fixed for the new stylesheet descriptor and user preferences stuff
[14:30:14 CDT(-0500)] <athena> feel free to suggest a better name
[14:30:16 CDT(-0500)] <EricDalquist> now to get import working
[14:30:19 CDT(-0500)] <EricDalquist> and then to test
[14:30:33 CDT(-0500)] <athena> ah (smile)
[14:30:36 CDT(-0500)] <EricDalquist> since none of the old code that uses these object has test or is really even testable for that matter
[14:30:51 CDT(-0500)] <athena> heh yeah
[14:31:22 CDT(-0500)] <EricDalquist> ok, I have a meeting to run to and then I'll see if I can get this import stuff figured out tonight
[14:31:32 CDT(-0500)] <athena> awesome (smile)
[17:38:09 CDT(-0500)] <EricDalquist> anyone have any objections on moving hasedit, hashelp, and hasabout off of IPortletDefinition directly and just model those as portlet definition attributes
[17:53:24 CDT(-0500)] <athena> i don't - what kind of attributes?
[18:10:36 CDT(-0500)] <EricDalquist> er parameters
[18:10:48 CDT(-0500)] <EricDalquist> since that is what we're moving to use those for I think
[18:11:15 CDT(-0500)] <EricDalquist> where the parameters are essentially hints to the structure and theme
[18:12:18 CDT(-0500)] <athena> yeah that sounds right

  • No labels