adding a security framework to ussrp

[Thomas Ludwig Kast]

maybe the first release of a security framework for ussrp should be 4 or 5 database tables and a couple hibernate mapped objects like ReportRights and DataSourceRights which would indicate details on the authorizations for a given user for a given report.

for example, one user might have rights to view a report in PDF format but not CSV.  another user might have rights to use a given datasource but not edit it.

then we might want to put some hooks into the controller also so that a user can't just change the URL to get the report they want...

does that make sense?

tom

[eric]

Hi Tom,

that seems correct ...
it would be nice to add these features to ussrp
Did u add my second ssh key to the ussrp project ?

Eric

[Thomas Ludwig Kast]

cool.

you upload your own ssh public keys.  log in to sf.  nav to - http://sourceforge.net/account/

you are already a developer, so after you upload your latest pub key, dev access for cvs should be working.

tom