File Release Notes and Changelog
Release Name: 2.0.0
Notes: Kasai v2.0.0 (c) 2004-2007 Manentia Software --------- Kasai is a 100% Java based authentication and authorization framework. It allows you to integrate into your application a granular, complete and manageable permission scheme. The goal of the framework is to provide a simple-to-use-yet-powerful security environment for multi-user applications. Unlike JAAS, Kasai provides a much higher security abstraction, it's targeted at the specific security requirements that arise in real-life applications such as Intranets, ERPs, CRMs, document managers, accounting systems, etc.
Changes: * Complete support for user and group custom attributes * SQL Server support * PostgreSQL support * Web based administrative interface, including user, group and role management, and audit queries * Added Jasypt for RDBMSAuthService password hashing, updated Config.properties parameters related to this. Now we support "strong", "basic", and "cleartext" password hashing. * NOTE: This implies that existing password tables are no longer supported, you need to re-issue passwords for all your users, blank them, or migrate them. An automated procedure will be included in v2.0.0 final. * Added customizable password validators * Implemented LengthPasswordValidator, DifferentCharactersPasswordValidator * Fixed mysql database creation script to use TinyInt instead of Bit * Added overwritepasswords.sql script to ease migration from 1.x to 2.0 * Fixed bug: Blocked superusers were allowed for all operatives, now they work just as normal blocked users (denied all operatives) * Removed iBatis JARs, no longer needed
