2 Feb 2009 16:26
[mule-jira] Commented: (MULE-4002) Support Spring Security HTTP Channel Security
[
http://www.mulesource.org/jira/browse/MULE-4002?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=28661#action_28661
]
Andrew Perepelytsya commented on MULE-4002:
-------------------------------------------
My investigation showed that spring-security exhibits strong dependency on servlet's filter and
request classes in this area. Will need to rescope the issue, as it can't be used as a generic http security
config mechanism in Mule without having to use servlets.
> Support Spring Security HTTP Channel Security
> ---------------------------------------------
>
> Key: MULE-4002
> URL: http://www.mulesource.org/jira/browse/MULE-4002
> Project: Mule
> Issue Type: Improvement
> Components: Modules: Security (Acegi, PGP, JAAS, others)
> Reporter: Dan Diephouse
> Assignee: Andrew Perepelytsya
> Priority: Major
> Fix For: ITR14, 2.x Product Backlog
>
>
> Background: users using RESTpack (or even just the http transport) need a way to secure their applications.
> Description: Users should be able to secure their applications based on URL patterns and by the HTTP
operation used (GET vs POST vs DELETE). Spring Security provides a mechanism to do this: http://static.springframework.org/spring-security/site/reference/html/ns-config.html#ns-requires-channel
> Acceptance criteria:
(Continue reading)
RSS Feed