Re: [securityfilter-devel] Securityfilter Improvements
Brought to you by:
chris_schultz,
maxcooper
From: Ivan L. <Iva...@ya...> - 2007-11-05 18:58:30
|
Christopher Schultz wrote: >> Wish-list: >> Support HttpRequest not only HttpServletRequest, so SF can be used with >> WebDAV. > > Do you mean that you want us to support ServletRequest and not just > HttpServletRequest? That might be a problem with the current > architecture, since we use the HttpSession (needs http heh heh heh) to > store the Principal object. WebDAV should always go over HTTP, though, > so I'm not sure why securityfilter + BASIC auth wouldn't work for WebDAV. > > Can you help me understand what we're missing? I mean HttpRequest, because: "Method PROPFIND is not defined in RFC 2068 and is not supported by the Servlet API." Servlet does not handle PROPFIND and some other types of request ... And WebDAV: ... WebdavServlet extends HttpServlet ... WebDAV security is a bitch, so if SF can handle such things you will bring some users on-board. -- Ivan Latysh Iva...@ya... |