svn commit: r901585 - /ofbiz/branches/executioncontext20091231/BranchReadMe.txt

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn commit: r901585 - /ofbiz/branches/executioncontext20091231/BranchReadMe.txt

adrianc
Author: adrianc
Date: Thu Jan 21 07:49:07 2010
New Revision: 901585

URL: http://svn.apache.org/viewvc?rev=901585&view=rev
Log:
Updated the BranchReadMe.txt file. Added security-aware artifact TODO list.


Modified:
    ofbiz/branches/executioncontext20091231/BranchReadMe.txt

Modified: ofbiz/branches/executioncontext20091231/BranchReadMe.txt
URL: http://svn.apache.org/viewvc/ofbiz/branches/executioncontext20091231/BranchReadMe.txt?rev=901585&r1=901584&r2=901585&view=diff
==============================================================================
--- ofbiz/branches/executioncontext20091231/BranchReadMe.txt (original)
+++ ofbiz/branches/executioncontext20091231/BranchReadMe.txt Thu Jan 21 07:49:07 2010
@@ -1,6 +1,22 @@
 ExecutionContext and Security-Aware Artifacts Notes
 ---------------------------------------------------
 
+2010-01-20: Security-aware artifact TODOs:
+
+1. Add security checking at the entity field level.
+Right now security checking is done only at the entity level.
+
+2. Improve the ArtifactPath class design. Right now the
+class exposes too much of its implementation, and the
+ContextUtil class exploits that. Client code should not
+know that the path is stored as an array.
+
+3. Encapsulate the
+Push Artifact->Run Protected Process->Pop Artifact
+code into a single method.
+
+---------------------------------------------------
+
 2010-01-13: The main navigation is controlled by the new
 security design. I created a new class - ContextUtil.java -
 to hold utility methods. Those methods can be moved to