Make secure object wrapping pluggable
-------------------------------------
Key: GEOS-2272
URL: http://jira.codehaus.org/browse/GEOS-2272
Project: GeoServer
Issue Type: Bug
Components: Security
Affects Versions: 1.7.0-RC3
Reporter: Andrea Aime
Assignee: Andrea Aime
Fix For: 1.7.1
Secure object wrapping, as implemented, hides the actual interfaces of the wrapped objects, but in some cases (versioning, for example) those need to be preserved. Yet, those interfaces might not be available in the main module. Also, the catalog has some allowance for storing extra objects that are not the well known ones, so it's not possible to foresee any object wrapping need.
Object wrapping should be make pluggable, using a wrapper factory interface as an extension point.
Note: using proxies has been considered, but that would require checking the method names against strings, making proxies quite vulnerable to any kind of refactoring or method additions. The current approach on the other side ensures a compile error occurrs, channeling the attention to the security related wrappers and making it impossible to make inadverted changes that could compromise a proper security wrapping.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira