Security Framework Comparison
As several frameworks exist to leverage wicket security and more could be on the way, it might be time for a comparison. The intention of this document is not to declare that this framework is better than another one but to provide you with the bare facts and let you decide what better suits your needs.
The frameworks
In alphabetic order
- Wicket Auth-Roles (does anyone know of a better place for information ?, all i could find was this integration guide)
- Standard Wicket Authentication and Rights Management (Swarm) (Swarm is an implementation of Wasp)
- Anybody knows of / is working on projects that should be mentioned here ?
Category Auth Roles Swarm Minimum JDK requirement?
1.5 / 1.4*
1.4
Minimum Wicket version required?
1.2.x
1.3.x
Location of security declarations?
Decentralized (on the components)
Centralized (default in a policy file)
Location of security handling?
Centralized (default in application)
Decentralized in security checks on components
Scope of IAuthorizationStrategy?
Application Session
Combines authentication and authorization?
Yes
Yes
Only secures Wicket (i.e. not other web services)?
Yes Yes
Integration with other security frameworks possible to secure other web services?
Acegi
Acegi
Actions based on? Strings
Classes (subclasses of WaspAction)
Action inheritance structure?
No Yes
Custom actions possible?
Yes
Yes
Security at the component level?
Yes
Yes
Security at the model level?
No
Yes
Requires custom components to work?
No
No
Has custom components?
No?
Yes
Examples online download online download * = You need to build this yourself by removing all JDK 1.5 stuff from the code.
Am i missing something, did i got something wrong? Feel free to edit this yourself if you have the permissions, or put it on the wicket mailing list.
There is some thing wrong, When I deploy the Example in Resin3.1.0
But it is fine in Tomcat5.0+!
I wanne known the reason of that!
The Exception is:
javax.servlet.ServletException:Unable to Create application factory of class
org.apache.wicket.spring.SpringWebApplication
than, show no Class Found that Classes!