2 Replies Latest reply on Feb 10, 2010 3:13 PM by Anil Saldanha

    AuthZ Dependencies and artifacts naming

    Anil Saldanha Master

      Sohil, I want to provide some suggestions about the dependencies (jars) in the lib directory of the alpha1 release.

       

      anil@localhost:~/authz/code/authz-1.0.alpha1/lib$ ls
      activation-1.1.1.jar            drools-core-4.0.7.jar                       jboss-xacml-2.0.5-20091006.221146-1.jar
      agent-1.0.alpha1.jar            dtdparser121-1.2.1.jar                      jbossxb-2.0.0.GA.jar
      antlr-2.7.6rc1.jar              ehcache-1.1.jar                             jta-1.0.1B.jar
      antlr-runtime-3.0.jar           hibernate-3.1.2.jar                         log4j-1.2.14.jar
      asm-1.5.3.jar                   janino-2.5.10.jar                           mvel-1.3.1-java1.4.jar
      cglib-2.1_3.jar                 jaxb-api-2.1.4.jar                          policy-server-1.0.alpha1.jar
      common-1.0.alpha1.jar           jaxb-impl-2.1.4.jar                         stax-api-1.0.jar
      commons-collections-2.1.1.jar   jboss-common-core-2.2.9.GA.jar              xalan-j_2.7.0.jar
      commons-logging-1.0.4.jar       jboss-dependency-2.0.2.GA.jar               xercesImpl-2.9.1.jar
      component-spec-1.0.alpha1.jar   jboss-kernel-2.0.2.GA.jar                   xml-apis-1.0.b2.jar
      core-3.2.3.v_686_R32x.jar       jboss-logging-spi-2.0.5.GA.jar              xml-apis-2.9.1.jar
      core-components-1.0.alpha1.jar  jboss-mdr-2.0.1.GA.jar                      xpp3_min-1.1.4c.jar
      dom4j-1.6.1.jar                 jboss-reflect-2.0.2.GA.jar                  xstream-1.3.1.jar
      drools-compiler-4.0.7.jar       jboss-sunxacml-2.0.5-20091006.221146-1.jar
      


      Topic 1: Dependencies of JBossXACML

       

      You can pick the JBossXACML 2.0.5.CR1 release from

      http://repository.jboss.org/maven2/org/jboss/security/jbossxacml/

       

      After this, the following jars will be replaced by 1 jar (jbossxacml-2.0.5.CR1.jar):

      • jboss-sunxacml-2.0.5-xxx.jar
      • jboss-xacml-2.0.5-xxx.jar
      • xalan_j_2.7.0.jar

       

      Basically, we removed the xalan dependency in 2.0.5 for JBossXACML.


      Topic 2: Naming of AuthZ components.

      I suggest you prefix authz- to policy-server, agent, component-spec etc.

      Or you can use the maven assembly plugin to assemble one authz jar.


      Topic 3: Cascaded Dependencies

      Each of the framework dependencies - JBoss Microcontainer, Drools, Hibernate etc are coming with their own pool of dependencies.

        • 1. Re: AuthZ Dependencies and artifacts naming
          Sohil Shah Master

          [After this, the following jars will be replaced by 1 jar (jbossxacml-2.0.5.CR1.jar):

          • jboss-sunxacml-2.0.5-xxx.jar
          • jboss-xacml-2.0.5-xxx.jar
          • xalan_j_2.7.0.jar

           

          Basically, we removed the xalan dependency in 2.0.5 for JBossXACML.]

          ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

          This is great. I will keep this change in mind for the next release

           

           

           

          Topic 2: Naming of AuthZ components.

          I suggest you prefix authz- to policy-server, agent, component-spec etc.

          Or you can use the maven assembly plugin to assemble one authz jar.

          -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------


          Yes, I have been thinking about packaging these into two jars, authz-client.jar and authz-server.jar for the client-side and server-side components respoectively

           

           

           

          Thanks

          Sohil

          • 2. Re: AuthZ Dependencies and artifacts naming
            Anil Saldanha Master

            Even when you package into one or 2 jars, it is beneficial to name the individual components with a prefix "authz-".  I have previously faced situations where my components have ended up being spi-1.0.0.jar and impl-1.0.0.jar

             

            I am sure in the next release, this can be fixed.