Open source role based framework

We have an application which is using :-
1) spring framework/j2ee code at the backend
2) while the front end is comprised of Adobe flex and action script. The app is web based.
A need of the application at the moment is for a role based authorization framework, based on which a decision can be made as to which widgets/tabs/screens should be visible to the user and which should be hidden from him.
Wanted to know
1) if somebody was willing to share some of his experiences on a similar project.
2) found and existing framework open source or otherwise helpful.
3) would recommend one architecture over the other
4) or anything else he would think might be beneficial to know.
Thanks

Most app servers have some built in container managed security (for example Tomcat Realms) which may or may not meet your requirements.

Similar Messages

Open Source Flex based framework for E-Learning...

Just wanted to let people on this forum know that there is an open source e-learning framework developed in Flex 3 available on http://www.gyatum.org. This framework has been named CrashCourse. It is in its preliminary stage at the moment but has the potential for expansion.

Most app servers have some built in container managed security (for example Tomcat Realms) which may or may not meet your requirements.

[ANN] XINS 2.1 open source Web Services framework release

XINS 2.1 Web Services Framework has been released.
XINS is an open source Web Services Framework based on simple specifications of the Web Service in XML and
generation of code and documentation from the specification.
The generation includes Client JAR with its Javadoc, Server side template with its Javadoc, documentation in OpenDocument Format,
documentation in HTML including the test forms, WSDL file, unit tests (JUnit) and stubs.
The Web Services accept several protocols including REST, SOAP, XML-RPC, XML, JSON Yahoo! and JSON-RPC.
What's new:
* Start the API with java -jar <api name>.war
* Improved generated specification in OpenDocument Format
* Include/exclude calling convention with ACLs
* New calling convention that maps SOAP request and response as the wsdl2api command mapping.
* Smaller generated build.xml
* Added possibility to include other runtime properties files
* The runtime property location can be a URL
* Swing Graphical User Interface
* New tools: emma, glean, webstart
* New target: javadoc-test-<api name>, javadoc-apis
* Bug fixes and small RFEs
Download XINS 2.1:
Windows installer: http://prdownloads.sf.net/xins/xins-2.1.exe?download
TAR GZ archive: http://prdownloads.sf.net/xins/xins-2.1.tgz?download
Resources:
Web site: http://xins.sourceforge.net/
XINS demos: http://xins.sourceforge.net/demo.html
Documentation: http://xins.sourceforge.net/documentation.html
User guide: http://xins.sourceforge.net/docs/index.html

I recommend you implement your web service with JAX-WS 2.0
Axis (both version) are good but why do you want to use something that is not included in JEE API, when Java provide same thing with better performance.
personally try to prevent non standard technologies despite they can be better than core java implementation sometimes.
I don't know Xfire.
the good:
-JAX-WS performance is better than axis,
- you can create your web service simply with annotation.(this means write class and then make it as a service easily)
- support every kind of service invocation(callback,Asynchronous,...)
- architecture is nice (you can operate on SOAP level)
the Bad:
- It is JEE 5 or JSE 6 dependent.
- there is seriously lack of documentation and examples for it, on java web sites and internet.

Open source projects based on Oracle technology

Hello:
Here's a project for the open source page at
Open Source Projects for Oracle:
http://www.oracle.com/technology/tech/opensource/projects.html
The open source (GPL) ValueObjects Framework for ADF is available for download. It is a JDeveloper 10g 10.1.2 extension for building SOAP-compliant DTOs over ADF Business Components.
http://www.sourceforge.net/projects/valueobjects
Quick intro at http://valueobjects.sf.net
Screenshots at http://valueobjects.sourceforge.net/screenshots/screenshots.html
Thanks,
- Zak
[email protected]

Hi,
Jim is right.
There is no way of converting/upgrading a VI to the newer version of LabVIEW without its block diagram. Below are a couple of KBs that discuss this issue:
How Do I Recover My Block Diagram If I Saved My VI with Options and Selected Remove Diagrams?
What Does it Mean When I Receive the Message "LabVIEW load error code 11"?
Feroz

New, open source JavaFX OSGI framework

First, a disclaimer: this is an open source project I started, and somebody may regard it as advertising (basically, it is ). I'm not sure if it's against forum rules. If so, please delete this thread.
Basically, it's a framework for developing modular applications based on OSGI. It should provide support for building applications for desktop, web and mobile devices. It's called DEMUX Framework. Published under Apache License.
http://demux.vektorsoft.com
So far, support is available for desktop applications based on JavaFX, and mobile apps for Android. Since this is JavaFX forum, I would like some feedback from people who work with JavaFX. Basically, is this something you would find useful and worth spending time developing?
If you have some time to throw away, give it a try. Please note that this is early stage development, so you will probably get frustrated and annoyed, buty ou should get the general idea.
Documentation and some code samples are available on project wiki: http://demux.vektorsoft.com/wiki
Source code for samples is available as part of binary download: https://bitbucket.org/vektorsoft/demux/downloads
Any feedback is welcome.

hi,
here's a thought stop spamming this forum with your crap....
A warning to others ignore any links this guy offers, 4/5 of his links so far are connected to spyware.
David.

Microsoft open sourced the Entity Framework

http://weblogs.asp.net/scottgu/archive/2012/07/19/entity-framework-and-open-source.aspx
Microsoft wants others to get involved in building the next version of the Entity Framework.
The source code is found here:
http://entityframework.codeplex.com/
The Mono Project is working to get the open sourced Entity Framework to work on Mono.
So, with Oracle working on a thin ODP.NET provider, hopefully, it will work on Mono too. But no guarantee from Oracle. I know at first, the thin ODP.NET provider will not support Entity Framework, but down the road it could (hopefully).

I'm using NHibernate and I'm more satisfied with it than EF.
Alex said that the final release for managed provider will come with Oracle 12 which maybe will come at the end of the year.

Open-sourced Java-based Webcam server/app available?

[If this thread does not belong here, please let me know where I can post this request!]
I was hoping to find an open-sourced java webcam application/server that is capable of recognizing various webcam (or video-capture) devices and is modular enough that new devices can be added as needed if missing.
Does anyone know if such an application exists and if so can you provide the URL links?
Kind regards,
Dan

If 7.0 was released, how come http://www.sun.com/webserver still only talks about 6.1?

ADF UIX Role Based Access Control Implementation

Hi,
Can anybody suggest a detailed example or tutorials of how to implement a role based access control for my ADF UIX application.
The application users can be dymanically added to specific roles (admin, Secretary, Guest). Based on the roles, they should be allowed to access only certain links or ADF entity/view operations. Can this be implemented in a centralized way.
Can this be done using JAZN or JAAS. If so, Please provide me references to simple tutorial on how to do this.
Thanks a lot.
Sathya

Brenden,
I think you are following a valid approach. The default security in J2EE and JAAS (JAZN) is to configure roles and users in either static files (jazn-data.xml) or the Oracle Internet Directory and then use either jazn admin APIs or the OID APIs to programmatically access users, groups and Permissions (your role_functions are Permissions in a JAAS context).
If you modelled your security infrastructure in OID than the database, an administrator would be able to use the Delegated Administration Service (DAS), as web based console in Oracle Application Server. To configure security this way, you would have two options:
1. Use J2EE declarative security and configure all you .do access points in web.xml and constrain it by a role name (which is a user group name in OID). The benefit of this approach is that you can get Struts actions working dirctly with it because Struts actions have a roles attribute.
The disadvantage is that you can't dynamically create new roles because they have to be mapped in web.xml
2. Use JAAS and check Permissions on individual URLs. This allows you to perform finer grained and flexible access control, but also requires changes to Struts. Unlike the approach of subclassing the DataActionForward class, I would subclass the Struts RequestProcessor and change the processRoles method to evaluate JAAS permissions.
The disadvantage of this approach is that it requires coding that should be done carefully not to lock you in to your own implementation of Struts so that you couldn't easily upgrade to newer versions.
1 - 2 have the benefit of that the policies can be used by all applications in an enterprise that use Oracle Application Server and e.g. SSO.
Your approach - as said - is valid and I think many customers will look for the database first when looking at implementing security (so would I).
Two links that you might be interested in to read are:
http://sourceforge.net/projects/jguard/ --> an open source JAAS based security framework that stores the user, roles and permissions in database tables similar to your approach
http://www.oracle.com/technology/products/jdev/collateral/papers/10g/adfstrutsj2eesec.pdf --> a whitepaper I've written about J2EE security for Web applications written with Struts and JavaServer pages. You may not be able to use all of it, but its a good source of information.
Frank

Open source shopping cart wont open with safari

Hi all...
I'm designing cart templates for a company that supplies an interface for uploading product to an open source shopping cart. The problem is I can't open the shopping carts with safari. They are fine with firefox and on a PC. (forgive me for swearing) The sites are open source carts based on php scripting with a lot of compressed data. A software interface is used to upload products etc... The error I get is
"Safari can’t open the page “not sure if I can put the link here as it is a business”. The error was: “bad server response” (NSURLErrorDomain:-1011) Please choose Report Bug to Apple..."
It's the same for all the sites using the carts.
Is there a fix at the user end or does safari simply not have support for these carts. Any help would be awesome....

PCI Compliance. As a merchant (online or brick & mortar store), you must take necessary steps to ensure your customer's CC info doesn't fall into the wrong hands. One way to do this is to pass your online customers off to a 3rd party processor like PayPal or Authorize.net. These companies are experts in safely gathering sensitive data, encrypting it and transmitting it to your payment Gateway and Merchant Bank account. This way, your customers never enter any sensitive data into your site's databases which avoids a lot of headaches for the web developer and merchant.
Server Security. Use a reliable web host. I can't emphasize this enough. Cheap hosting is no bargain especially if your host doesn't take reasonable steps to secure their servers at their end.
Lock down your php scripts & form log-ins to defend your site against possible hackers & robot exploitation. If your site is ever compromised, you will need reliable backups of your Site files and MySql data. Make sure to backup these files regularly and store them in a safe place.
Backend log-in. Use strong, encrypted passwords -- 17 characters, upper & lower case with symbols. If you can remember your passwords, they're not strong enough. I keep mine written down in a Rolodex.
Change the Admin log-in name to something less obvious like GrandHighExhaltedMysticRuler or something only you will recognize as the site's admin level user. It's also a good idea to change your server, database and backend log-ins regularly.
Finally, consider running SecureLive on your web server. I have it running on a dedicated server and this software has more than paid for itself. It identifies hacker attempts, blocks the user and sends the hacker's IP address to an FBI database. SecureLive - Home
Nancy O.

Open Source AIR App Wanted

I'm not sure if this is the right forum but I am looking for
AIR developers who might be interested in creating an open source
application based on the Tweetworks API. Call it Tweetworks
desktop. I think it would be a great project for the AIR developer
community.
Here is a link to the API:
http://www.tweetworks.com/pages/api
The API key for the project is:
8d1f4bc7a28c72495102ee23aa0adb912c166e0c

Hi I have added the following to my application.xml file
<x>0</x>
<y>0</y>
The application now open is the top left hand corner of the screen but I would like it to open to the top right hand side of the screen.
I also need to make the application sit on top of other windows
How do I do this?

Employ open source framework to existing web application

Hi everyone,
Existing application model:
MySQL, Tomcat, Java 6 SE, so no EJB.
Own MVC model used (no framework).
Own data access layer model (no framework).
Because this is a corporate application, the UI experience
can not be broken (in terms of new beautifuly deployed pages
vs old existing pages - developed around 8 years ago). Application
run on balanced Tomcats, so it's getting more and more difficult
to synchronize all information.
Question:
Is there a way of smooth transition from own developed MVC
and DAO to open source frameworks to leverage some of the work
required to do manually as it is currently, like validation,
access like hibernate instead of manual creation of DAO objects ... ?
Also, it would be nice to have some reach user interface framework
employed but I don't know how it would be achieved not to break
the look and feel (all pages would have to be done at the same time,
and we are talking here about hundrets of existing screens developed
in different technologies).
Application consists of few millions of lines - so it's a real challange.
Thanks for all tips.

AdrianSosialuk wrote:
Hi everyone,
Existing application model:
MySQL, Tomcat, Java 6 SE, so no EJB.
Own MVC model used (no framework).
Own data access layer model (no framework).
Because this is a corporate application, the UI experience
can not be broken (in terms of new beautifuly deployed pages
vs old existing pages - developed around 8 years ago). What is the exact form of the GUI? Client apps? Html only? what?
Application run on balanced Tomcats, so it's getting more and more difficult
to synchronize all information.
What does that mean? Why are there two of them?
(all pages would have to be done at the same time,
and we are talking here about hundrets of existing screens developed
in different technologies).As a requirement that probably guarantees failure.

Is JSF technology based on open source?

Hi,
Does any one know if JSF is based on any open source technology? Like struts?
Because my company projects use Struts technology, they want to switch to other
non-open source technology, does JSF suit for this purpose?
Thanks for your valuable advice,
Raymond

Most of Java itself is Open Source. The JSF API is open source and can be found at https://javaserverfaces-sources.dev.java.net and as BalusC mentioned, you can access Mojarra's source code as well from there. The MyFaces implementation is also open source.
Does your company want something that is not open source? Or do they want something they can count on with a company to stand behind it? A product with real release cycles and a person they can call for support? If that's what they really want, JSF is a good choice. Particularly if you choose GlassFish (which includes JSF) -- or more likely the Sun Java Systems Application Server version: http://www.sun.com/software/products/appsrvr/index.xml) which is fully supported by Sun MIcrosystems. This should give your company the confidence they need in a fully supported product. BTW, there are tools and other supported products (portal, access manager, JBI, etc.) that integrate very well with this solution if you need them. Check it out.
Good luck!
Ken Paulsen
https://jsftemplating.dev.java.net

An open source framework for agile development with Sites

I am happy to announce the release of a new open source framework for sites development: AgileSites 1.0.0.beta1.
AgileSites is an open source framework built using standard and documented Sites API provinding a number of features meant to simplify development, mostly to make agile development and offshoring way easier and more manageable.
Some of the features:
- MVC with plain Java controller and pure HTML views
- Templating done in jQuery style (like client-side javascript templating)
- Integrated unit testing and build system
- Integrated csdt so everything is source and can be stored in Git or Subversion and rebuilt with jenkins in minutes
- Hot reloading of java classes, including the url assembler - you code in java without restarting the application server
- Single jar deployment - all your site code is in a jar that can be easily tracked and moved around
- A simplified API layer built on top of standard tag assets making development a breeze
- Complete and unlimited access to the full Sites API
- Keeps the JSP structure so the framework can be added to another site using JSP
AgileSites is available in his own dedicated site: www.AgileSites.org with a video showing his capabilites.

The framework is completely following WebCenter Sites standard. It is built on top of JSP and Java using only documented API and standard Java libraries. It is not different than any other site implementation. It is basically a pre-built site to make easier applying agile development practices. It is as supported by Oracle as any other custom website implementation on top of Sites.

Build JSF Solutions rather than a hundred 'open source' frameworks

Hi,
It seems to me that frequently when people post queries about problems they're having with JSF, somebody will send a reply back telling them how myFaces or Tiles, or some other 'Open Source' soulution solves this one problem for them.
It makes me wonder whether we need 100 less than adequate solutions, rather than have a complete and powerful JSF. Of course, having other options is good, but when you're up against a fully functional and wonderful to work with solution like ASP.NET and ASP Server Controls, you can't very well pitch your 100 kinda-sorta-solutions.
This isn't a myFaces or Tiles Forum, and while I appreciate learning about what they have to offer, I'd much rather the conversations focus on how to improve JSF so it blossoms into something of an ASP.NET killer.
Regards,
Reuben.

MyFaces IS an open source JSF implementation!
regards,
Manfred
mailto:[email protected]
http://myfaces.sourceforge.net

How Open source Flex looks to a mid level developer

Here is my response to a post Matt made on a blog:
THe whole post:
http://blog.simb.net/2009/01/19/take-flex-back-for-the-community/
@Matt
1st off thanks, now my input:
The crux of your criticism seems to be that the process that we use for decision-making is closed its certainly not how we feel
Unfortuntly, this seems like a case of bad commuication by Adobe and the Flex team. If notable community experts get the impression of closed doors, then *certainly* the rest of us get this impression as well.
but there has been very little participation from the community so far
Im a solid dev, and not an expert but I can contribute in things such as testing and low level optimization; But, the Adobe open source site is a galactic disaster and discourages me from getting invloved. It has so many webpages that just go around in circles - filled with text that is verbose, this frustrates me to a great deal. As opposed to somehting straight foreward like:
http://framework.zend.com/download/latest
or
http://code.google.com/p/papervision3d/
Everything is here and easily notable. I avoid the seamingly endless pages and confusion. If I want to get to the Flex dev mailing list I have to register, then choose the lists, add the lists to my account. go though my account prefs read some directions.. then set up some other preferences..jeeeezzzz. If I want to submit a feature request I am directed to create another login for some Bug and Issue management? HUH? I thought I was submitting a featue request.
Right on papervisions google HOME page I see Getting started > Papervision3D Mailing List.
Next when I finially do get to Flex SVN, this trunk. is nothing like I have seen.what IS all this stuff and where do I go to learn about it? There are countless subfolders filled with things I vaguely understand and if I want to learn what it is. where do I go? Is there even a src folder?
Here is a classic example.
Flex trunk Read Me:
http://opensource.adobe.com/svn/opensource/flex/sdk/trunk/README.txt
vs.
Zend Trunk Read me:
http://framework.zend.com/svn/framework/standard/trunk/README.txt
*What* is the Flex team thinking with this?
I just spent 5 minutes or so twirling through all these SVN directories and Adobes website and I am clueless. I feel like the project is unessarily complex and disorganized - even if it isnt. This just convinced me to delete my Flex sdk bookmark on my SVN client.
Adobe just lost one potential contributor to Flex SDK.
We have another idea that were bouncing around that I hope to share in a week or two but wont get into now.
Saying stuff like this is what gives people the impression of closed. Why not post these ideas the Flex team has? Even if it is stupid or incomplete
Thats the whole point.

Wow, thanks for your response. This is great. I now understand that I had a combination of prejudice and ignorance when regarding Adobe Open Source. Perhaps my ignorance on these particulars is something that other devs encounter ( that whole perception thing ). I have chatted with people who consider the Flex SDK and Flex Builder... not the same... but fused together so much that it'd be just crazy to try and use one with out the other When I mention using Flex without Flex Builder.... people get that glazed over look in their eyes....( FYI I'm a FDT man, but am keeping a close eye on the new Flex Builder ) I'll use Zend as an example ( it's the best that I can come up with ) but I feel like there is a difference between the open source framework and Zend Studio ( commercial software ). Anyway, I'm really excited about how you've responded to all this. I have more ideas, but Ill sit on them and think it through and get ready for next weeks meeting. Thanks, Alan On Jan 23, 2009, at 1:31 AM, Matt Chotin wrote: > A new message was posted by Matt Chotin in > > General Discussion -- > How Open source Flex looks to a mid level developer > > I've delayed responding to this because frankly I'm not sure what to > say for much of it. The first thing I have to point out is that > many of the things you mention are related to Flex Builder and not > the Flex SDK, which is the part that is open source. So things like > the FB features, and NDA as part of its prerelease program, etc are > part of the commercial offerings from Adobe, not the Flex SDK. > Every build of the SDK has been available from the open source site, > the MAX issues were for commercial products. > > The roadmap for Flex 4 has been posted on the Gumbo page now for a > while, we don't put up specific dates because we don't know specific > dates, and as we get closer to feeling certain on a date we've put > it up. I think that having dates up that constantly change is > counter-productive. > > We use a code name because you never know if another version is > going to jump into the middle or what could happen, locking in on a > version number is often just setting yourself up for confusion > later. Plenty of other projects use code names too, the idea that a > code name denotes secrecy is frankly ludicrous. > > Regarding your question about 1000 developers and 80% wanting to go > in a different direction: if 80% of our customers think we should > move one way, don't you think it'd be pretty silly as a company to > go against them? Adobe as a company, and the Flex team as a product > team, are very focused on delivering our customers value. If we > fail to deliver value, not only is our free open source product not > used, but our paid products aren't used as well. The things that > you sometimes run into are long-term vision vs. short-term pains, > and that may be where some aspects of open source vs. closed > differ. The Adobe team has a long-term vision of Flex, which we > have tried to share and get feedback on, and we make decisions based > on that vision while taking into account the short-term needs of > developers. I think this is a pretty reasonable approach overall, > and you as a Flex/Flash developer have probably benefited from it. > > I'm sorry you feel like Adobe is getting the only benefit of open > source and you aren't, we certainly believe that we've put pieces in > place to allow for everyone to benefit, and will continue to take > suggestions on how we can improve. > > Matt > > > On 1/21/09 7:54 AM, "Alan Klement" <[email protected]> wrote: > > A new message was posted by Alan Klement in > > General Discussion -- > How Open source Flex looks to a mid level developer > > Matt, your right. The Adobe Open Source site does have sufficient > resources, but the perception I had , as a developer interested in > getting invloved, was that the information was either not there, > incomplete, or difficult to find. The perception to me is that > Adobe is not serious about 'Open Source" - even if it is, the > perception I have is that it isn't. > > I don't mean disrespect, but I don't take "Adobe Open Source" > seriously. To illustrate my point I'll use this ( albeit a bit > extreme ) example: > > Suppose the Flex community consists of 1000 devoted developers. > 80% of these developers decide to take the sdk into a direction they > feel it needs to go. This decision, regardless if it's 'good' or > not, renders it incompatible with other Adobe products, namely Adobe > Catalyst. WIll Adobe accept the community's decision? > > When Adobe can answer 'yes' to that question, I will take Adobe's > commitment seriously. > > And there are so many other things t! hat send me red flags. > > - Why is the new name of Flex not public, and why am I, as others, > breaking NDA to talk about the renaming process with other Flex devs? > - What business is NDA doing in an 'Open' project. > - Why is Adobe tight lipped about a release for Flex 4? Where is > the roadmap? https://wiki.mozilla.org/Releases . > - Why are new features in Flex Builder not public? Adobe asks 'what > do you want', but never tells us the results of these polls and what > features it is actively working on. > - Why are there builds of Flex 4 passed out at MAX, but unavailable > to non-attendies. Had I *paid* to go to MAX, I'd have Flex 4... > - You mentioned that there wasn't a 'budget' to make it easier for > devs to submit feature suggestions? Set up a google mailing list, > that'll cost you 0 dollars. > - What is the term 'budget' doing in open source. If Adobe won't do > something, ask the community to chip in. > -Who are the other Adobe Flex devs? I can go to other open source > projects and see the names and contact info of other devs. Why > aren't THEY posting their opinions on this message board? > _Why all the 'codename' garbage. 'Codename' denotes secrecy. > - and on and on.... > > To me, Adobe looks like they want all the benefits of an open source > project, but none of the consequences. Being open source means > releasing a degree of control over the software. Hell, Richard > Stallman is still trying to convince people to change 'Linux' to > 'Linux-GNU'. > > I would like to help, but I just don't think my efforts would be > seriously considered. I work all day developing Flex applications > and front end Flash web sites. I don't want to then spend my free > time to be engrossed with a project's red tape ( Adobe policies ) - > only to have my efforts to be blown off. > > Sorry guys, it just looks like a win-win for Adobe and a lose-lose > for me. > > ________________________________ > View/reply at How Open source Flex looks to a mid level developer <a href=http://www.adobeforums.com/webx?13@@.59b790da/2 > > > Replies by email are OK. > Use the unsubscribe <a href=http://www.adobeforums.com/webx?280@@.59b790da!folder=.3c060fa1 > > form to cancel your email subscription. > > > > > ------------------------------------------------------ > View/reply at <a href=http://www.adobeforums.com/webx?13@@.59b790da/5> > Replies by email are OK. > Use the unsubscribe form at <a href=http://www.adobeforums.com/webx?280@@.59b790da!folder=.3c060fa1 > > to cancel your email subscription.

Open source role based framework

Similar Messages

Maybe you are looking for