Pro Spring - ACEGI?

[Mark Fisher]

I checked the Table of Contents and didn't see any mention of the ACEGI security system. Is this covered in the book? and if so, does it cover implementation of a single-sign-on web application?

Thanks,
Mark

[Lasse Koskela]

Nope, it doesn't cover Acegi. I'd actually be very interested to know what aspects of security does Pro Spring cover?

[Andrew Patzer]

I've read about half of Pro Spring and for the most part, I think it's an excellent book. Nice job, Rob and Jan. As for security, it is not addressed at all in the book except for the following excerpt:

"Although we have not discussed application security in any detail in this book, it is still a very important topic. Traditionally, a J2EE application utilizes the security features provided by the container to secure an application at both the servlet and EJB levels..."

It would have been nice if they had covered some security techniques, but I understand their decision to leave it out. It's still a great book.
[ February 22, 2005: Message edited by: Andrew Patzer ]

[Lasse Koskela]

Thanks, Andrew.

[Matt Raible]

The next chapter (to be published in March) of Spring Live covers J2EE and Acegi Security, but doesn't cover single sign-on. I hope to add single sign-on with CAS in the near future.

[Rob Harrop]

Unhappily, we had to leave some things out and Acegi was one of them .

As I mentioned on another post, we are planning a 2nd edition and Acegi will feature quite heavily in this.

Rob