Acegi on Websphere? - Websphere

This is a discussion on Acegi on Websphere? - Websphere ; I have some developers asking to use ACEGI (also known as the Spring Security Framework). Just wondering if anyone out there has any experiences with running ACEGI on Websphere (good bad or indifferent). Personally, I get an extreme case of ...

+ Reply to Thread
Results 1 to 8 of 8

Thread: Acegi on Websphere?

  1. Acegi on Websphere?

    I have some developers asking to use ACEGI (also known as the Spring Security Framework).



    Just wondering if anyone out there has any experiences with running ACEGI on Websphere (good bad or indifferent).



    Personally, I get an extreme case of the willies about farming application security out to some random third-party open source package. I'm willing to be persuaded otherwise, but I haven't really seen much on the topic of integrating ACEGI with Websphere, and I've got a lot of concerns about, well, every aspect of it -- support, maintainibility, integration with future releases, etc, etc.



    So, is anybody out there using ACEGI on Websphere?



    Thanks,



    Tom

  2. Re: Acegi on Websphere?

    Not a direct answer, just a few links in case you didn't find them already:
    *
    http://www.ibm.com/developerworks/we...attcorner.html
    * http://www.ibm.com/developerworks/library/j-acegi1/

    HTH.


  3. Re: Acegi on Websphere?

    tvalesky@patriot.net wrote:
    > I have some developers asking to use ACEGI (also known as the Spring Security Framework).

    >

    > Just wondering if anyone out there has any experiences with running ACEGI on Websphere (good bad or indifferent).

    >

    > Personally, I get an extreme case of the willies about farming application security out to some random third-party open source package. I'm willing to be persuaded otherwise, but I haven't really seen much on the topic of integrating ACEGI with Websphere, and I've got a lot of concerns about, well, every aspect of it -- support, maintainibility, integration with future releases, etc, etc.

    >

    > So, is anybody out there using ACEGI on Websphere?

    >

    > Thanks,

    >

    > Tom


    I would absolutely not recommend using ACEGI with WAS. It doesn't
    leverage any JEE standard capabilties, or WebSphere provided security
    features, instead it provides alternative implementations.

    A simpler solution for fine-grained authorization is described here:

    http://www.ibm.com/developerworks/we...attcorner.html
    http://www.ibm.com/developerworks/we...attcorner.html
    http://www.ibm.com/developerworks/we...attcorner.html

    This will work with standard WebSphere authentication.

  4. Re: Acegi on Websphere?

    On Mar 21, 12:14*pm, tvale...@patriot.net wrote:
    > I have some developers asking to use ACEGI (also known as the Spring Security Framework).

    >

    > Just wondering if anyone out there has any experiences with running ACEGI on Websphere (good bad or indifferent).

    >

    > Personally, I get an extreme case of the willies about farming applicationsecurity out to some random third-party open source package. I'm willing tobe persuaded otherwise, but I haven't really seen much on the topic of integrating ACEGI with Websphere, and I've got a lot of concerns about, well, every aspect of it -- support, maintainibility, integration with future releases, etc, etc.

    >

    > So, is anybody out there using ACEGI on Websphere?

    >

    > Thanks,

    >

    > Tom


    It's a Bad Experience , I would prefer not to hang on with acegi , it
    would be very very difficult to extend the framework or sometime if
    you want to unplugged it's
    really cumbersome.

  5. Re: Acegi on Websphere?

    None of the links work.

  6. Re: Acegi on Websphere?

    g_kollengode@yahoo.com wrote:
    > None of the links work.


    They work just fine for me.

  7. Re: Acegi on Websphere?

    There's a space in the link...when you click on the link it gets translated to a '%20'. Just remove the '%20' and reload the link.



    Ken

  8. Re: Acegi on Websphere?

    I highly recommend you check out Spring Security 2.0, which just went
    final a few days back. They introduced a preauthentication concept
    that can fully integrate with standard Java EE security, if that's a
    big concern of yours.

    On Mar 26, 3:06 pm, hsai...@gmail.com wrote:
    > It's a Bad Experience , I would prefer not to hang on with acegi , it
    > would be very very difficult to extend the framework or sometime if
    > you want to unplugged it's
    > really cumbersome.



+ Reply to Thread