diff --git a/changelog.txt b/changelog.txt index 4beb4c0126..243552eff7 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,6 +1,7 @@ -Changes in version 0.x (2004-xx-xx) ------------------------------------ +Changes in version 0.6.1 (2004-09-25) +------------------------------------- +* Resolved to use http://apr.apache.org/versioning.html for future versioning * Added additional DaoAuthenticationProvider event when user not found * Added Authentication.getDetails() to DaoAuthenticationProvider response * Added DaoAuthenticationProvider.hideUserNotFoundExceptions (default=true) diff --git a/docs/reference/src/index.xml b/docs/reference/src/index.xml index ce9e72eb2a..4ee72eb0a9 100644 --- a/docs/reference/src/index.xml +++ b/docs/reference/src/index.xml @@ -7,7 +7,7 @@ Reference Documentation - 0.6 + 0.6.1 @@ -74,6 +74,61 @@ The security architecture does not have a notion of roles or groups, which you may be familiar with from other security implementations. + + + Current Status + + The Acegi Security System for Spring is widely used by members + of the Spring Community. The APIs are considered stable and only minor + changes are expected. Having said that, like many other projects we + need to strike a balance between backward compatibility and + improvement. Effective version 0.6.1, Acegi Security uses the Apache + Portable Runtime Project versioning guidelines, available from + http://apr.apache.org/versioning.html. + + Some improvements are currently intended prior to the 1.0.0 + release. These are: + + + + Replacing the Ant build with a Maven build. When this + happens the lib directory will no longer be + distributed in ZIP releases or hosted in CVS. + + + + "Remember me" functionality. Some discussion on this can be + found at + http://sourceforge.net/mailarchive/forum.php?thread_id=5177499&forum_id=40659. + + + + A sample web application which demonstrates the access + control list package. + + + + Implementation of an + ObjectDefinitionSource that retrieves its + details from a database. + + + + Deprecation of Acegi Security's various EH-CACHE-based cache + implementations. Instead Acegi Security will provide new cache + implementations which use Spring Framework's new (currently in + CVS) EhCacheManagerFactoryBean factory. The + deprecated classes may be removed from the 1.0.0 release. + + + + Whilst this list is subject to change and not in any particular + order, none of the above improvements are likely to result in changes + to the API. The improvements are also relatively minor to implement. + Users of Acegi Security System for Spring should therefore be + comfortable depending on the current version of the project in their + applications. + @@ -1596,9 +1651,10 @@ public boolean supports(Class clazz); ifNotGranted="ROLE_SUPERVISOR", or you'll be surprised to never see the tag's body. - By requiring all attributes to return true, the authorize tag allows you to - create more complex authorization scenarios. For example, you could - declare an ifAllGranted="ROLE_SUPERVISOR" and an + By requiring all attributes to return true, the authorize tag + allows you to create more complex authorization scenarios. For + example, you could declare an + ifAllGranted="ROLE_SUPERVISOR" and an ifNotGranted="ROLE_NEWBIE_SUPERVISOR" in the same tag, in order to prevent new supervisors from seeing the tag body. However it would no doubt be simpler to use @@ -1632,12 +1688,12 @@ public boolean supports(Class clazz); - Writing an AccessDecisionVoter implementation - and using either ConsensusBased, + Writing an AccessDecisionVoter + implementation and using either ConsensusBased, AffirmativeBased or UnanimousBased as the - AccessDecisionManager may be the best approach to - implementing your custom access decision rules. + AccessDecisionManager may be the best approach + to implementing your custom access decision rules. @@ -1755,8 +1811,8 @@ public boolean supports(Class clazz); objects at runtime. However, several classes have been provided to make this process transparent in many situations. - The net.sf.acegisecurity.ui package is designed - to make interfacing web application user interfaces with the + The net.sf.acegisecurity.ui package is + designed to make interfacing web application user interfaces with the ContextHolder as simple as possible. There are two major steps in doing this: @@ -2453,10 +2509,9 @@ $CATALINA_HOME/bin/startup.sh into some type of backend authentication repository, such as an LDAP server or database. - If you are already running an existing CAS server instance, - you will have already - established a PasswordHandler. If you do not - already have a PasswordHandler, you + If you are already running an existing CAS server instance, you + will have already established a PasswordHandler. If + you do not already have a PasswordHandler, you might prefer to use the Acegi Security System for Spring CasPasswordHandler class. This class delegates through to the standard Acegi Security @@ -2922,8 +2977,6 @@ $CATALINA_HOME/bin/startup.sh Advanced CAS Usage - [DRAFT - COMMENTS WELCOME] - The CasAuthenticationProvider distinguishes between stateful and stateless clients. A stateful client is considered any that originates via the @@ -3817,10 +3870,11 @@ INSERT INTO acl_permission VALUES (null, 6, 'scott', 1); Further Information Questions and comments on the Acegi Security System for Spring are - welcome. Please direct comments to the Spring Users mailing list. You're - also welcome to join the acegisecurity-developer mailing list. Our - project home page (where you can obtain the latest release of the - project and access to CVS, mailing lists etc) is at + welcome. Please use the Spring Community Forum web site at + http://forum.springframework.org. You're also welcome + to join the acegisecurity-developer mailing list. Our project home page + (where you can obtain the latest release of the project and access to + CVS, mailing lists, forums etc) is at http://acegisecurity.sourceforge.net. diff --git a/project.properties b/project.properties index d286567c01..1d497a17f9 100644 --- a/project.properties +++ b/project.properties @@ -6,7 +6,7 @@ # $Id$ # Project version -acegi-security-version=0.6 +acegi-security-version=0.6.1 # Project name name=acegi-security-system-for-spring