AW: [smila-dev] Smila Security Concept

[<Daniel.Stucky@xxxxxxxxxxx>]

Hi Leo, thanks for your feedback.

In all our concept specifications we have a section "Discussion" that should be used to provide feedback and discuss the topic. I guess this is an internal agreement of the project team that is not documented anywhere, so no blame on you :-)
The result of the discussion can then be worked into the original concept (in general by the creator of the concept). Otherwise the original concept may blur as different views/intentions are mixed.

Therefore I restored the original version, kept some of your improvements for better understanding and moved changes/suggestions/questions to the Discussion section. Please check if I forgot anything and if the text in discussion section makes sense or needs some rework.

Bye,
Daniel


> -----Ursprüngliche Nachricht-----
> Von: smila-dev-bounces@xxxxxxxxxxx [mailto:smila-dev-
> bounces@xxxxxxxxxxx] Im Auftrag von Leo Sauermann
> Gesendet: Freitag, 16. Januar 2009 18:57
> An: Smila project developer mailing list
> Betreff: Re: [smila-dev] Smila Security Concept
> 
> It was Daniel.Stucky@xxxxxxxxxxx who said at the right time 16.01.2009
> 14:20 the following words:
> > Hi all,
> >
> > I have created a specification page for handling security in Smila:
> > http://wiki.eclipse.org/SMILA/Specifications/Smila_Security_Concept
> >
> > Feel free to discuss and comment, feedback is most welcome.
> >
> I changed some parts of the wikipage that were a bit unspecific.
> I interpret your call for discussion as a call for changing the wiki -
> as in "a wiki is a place to delete and change text".
> 
> Generally, I see that the security considerations should be taken more
> deeply,
> for example by looking into the dark cave of SASL/LDAP/Kerberos for
> wisdom about authentification,
> but for storing user identification and group identification of indexed
> content, I see a complex thing coming up.
> 
> Also, storing these sensible information into normal attributes makes
> it
> open for easier hacking,
> I wonder if some fields should be in protected areas of records.
> 
> best
> Leo
> 
> 
> > Bye,
> > Daniel
> >
> > _______________________________________________
> > smila-dev mailing list
> > smila-dev@xxxxxxxxxxx
> > https://dev.eclipse.org/mailman/listinfo/smila-dev
> >
> >
> 
> 
> --
> ____________________________________________________
> DI Leo Sauermann       http://www.dfki.de/~sauermann
> 
> Deutsches Forschungszentrum fuer
> Kuenstliche Intelligenz DFKI GmbH
> Trippstadter Strasse 122
> P.O. Box 2080           Fon:   +49 631 20575-116
> D-67663 Kaiserslautern  Fax:   +49 631 20575-102
> Germany                 Mail:  leo.sauermann@xxxxxxx
> 
> Geschaeftsfuehrung:
> Prof.Dr.Dr.h.c.mult. Wolfgang Wahlster (Vorsitzender)
> Dr. Walter Olthoff
> Vorsitzender des Aufsichtsrats:
> Prof. Dr. h.c. Hans A. Aukes
> Amtsgericht Kaiserslautern, HRB 2313
> ____________________________________________________
> 
> _______________________________________________
> smila-dev mailing list
> smila-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/smila-dev