Table of Contents

Time/Place

This meeting is a hybrid teleconference and IRC chat. Anyone is welcome to join...here's the info:

Attendees

Agenda

Minutes

General
  1. ReadyTalk next week instead of Google-Hangout
Fedora 3.7 Release
  1. All items are closed
  2. Test plan is currently being generated
  3. Release soon
AuthN/Z
  1. Auth wiki doc to be cleaned up today
    • Requesting feedback on document
  2. Integration approach
    • Overlaying xacml / pdp on fcrepo-webapp
    • Agreement, reasonable approach for modularization for now
  3. Flow
    1. Container authN
    2. Mode.session authenticated (AuthenticationProvider)
    3. JAX-RS, request ends up at a resource class
      • No authZ will have happened at this point yet
    4. Mode.security context
    5. Question: Is there a point where we require Mode implementation updates?
  4. We need additional Auth input, scenarios
    • Scott Prater, input?
  5. There is interest in keeping Auth integration at the oauth level
    • Can we minimize the scope of fedora's Auth responsibility?
  6. Discussion of Hydra security flow
    • rightsMetadata: users/groups/embargo
  7. Need to ensure support for both approaches
    • holding policies outside of fedora
    • holding policies inside of fedora
#trackbackRdf ($trackbackUtils.getContentIdentifier($page) $page.title $trackbackUtils.getPingUrl($page))
  • No labels