RE: [wsrp][security] minutes from 5/15 telecon

[Thomas Schaeck <SCHAECK@de.ibm.com>]

While I think it is ok to offer an extensibility mechanism that allows
domain specific portlet services to exploit special roles in vertical
portals, I expect that portlet service providers who want their portlets to
run in all WSRP compliant portals will need to limit themselves to use the
default roles.

The definition of different roles with different semantics in portlet
services has a strong potential to seriously limit interoperability of the
service. The portlet might use its own "admin" role only if it needs not be
interoperable with portals that use the "WSRP-Admin" role.

Best regards,

Thomas


"Tamari, Yossi" <yossi.tamari@sapportals.com> on 05/19/2002 04:42:27 PM

Please respond to "Tamari, Yossi" <yossi.tamari@sapportals.com>

To:    "'Cassidy, Mark'" <mcassidy@Netegrity.com>,
       "'wsrp@lists.oasis-open.org'" <wsrp@lists.oasis-open.org>
cc:
Subject:    RE: [wsrp][security] minutes from 5/15 telecon



Hi Mark,

Regarding the "Standard Portal Roles" issue, I do not want to repeat Petr's
ideas that he sent on 15/5, but essentially, I see no reason, if we allow
the portlet to define its own roles, not to define a small number of
"reserved word" roles. If a portlet does not want to use these roles, it
can
just use its own (for example, the default admin role can be "WSRP-Admin",
and a portlet can just use its own "Admin" role if it prefers). In the same
venue, if a portal does not want to make use of the default roles, it can
just use them as a basis for role mapping, either across all portlets or
for
individual portlets.

This will allow portal vendors to differentiate themselves, while still
enabling plug and play for those bigger portal installations, where
individually mapping roles can be a huge amount of work, as long as the
portal and the portlets are willing to limit themselves to the predefined
roles.

 Yossi.

-----Original Message-----
From: Cassidy, Mark [mailto:mcassidy@Netegrity.com]
Sent: Saturday, May 18, 2002 9:21 PM
To: 'wsrp@lists.oasis-open.org'
Subject: [wsrp][security] minutes from 5/15 telecon


> attached are minutes from this week's telecon.
>
>  <<wsrp security minutes 515.htm>>

----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>