users@javaee-security-spec.java.net

[javaee-security-spec users] [jsr375-experts] Re: JAVAEE_SECURITY_SPEC-12

From: Alex Kosowski <alex.kosowski_at_oracle.com>
Date: Sun, 29 Mar 2015 21:01:27 -0400

Hi Pedro,

The Security Context could also be a managed bean used in EL
authorization rules mentioned in
https://java.net/jira/browse/JAVAEE_SECURITY_SPEC-7.

Regards,
Alex

On 3/29/15 7:34 PM, Pedro Igor Silva wrote:
> Hey All,
>
> I was driving through JIRA and noticed JAVAEE_SECURITY_SPEC-12. I was wondering if we should not prioritize this one over others. Probably after we finish our Terminology epic.
>
> IMO, this issue gathers an important point in respect to:
>
> - Centralized interface for security-related information
> - Removes redundancy and provides a more concise way to provide access to security related information
> - Helps other specs to address security in a more similar fashion
>
> And also looks like a core concept if we are going to take it forward.
>
> I think this issue brings one of the main reasons that make people usually decide to use frameworks such as Shiro, Spring Security or PicketLink. I think all of them provide a similar concept.
>
> Regards.
> Pedro Igor