Changes

This page is will summarize first thoughts on annotation-based security/authentication support in BaseX. Annotation specification: (: Responsible for performing the login of an user, see sec:authenticate and sec:login functions in the security module :) <br/>'''%sec:authenticate()''' <br/> (: The basic security annotation enforcing a authorization on method invocation.:) <br/>(: The literal defines a principal which must be assigned to the current logged in user :) <br/>(: If the authorization was not successfull the default authorization fallback is called. @see %sec:authorization-fallback() :) <br/>'''%sec:requires-principal(string)''' <br/> (: The basic security annotation enforcing a authorization on method invocation.:) <br/>(: The first literal defines a principal which must be assigned to the current logged in user :) <br/>(: The second defines the fallback function which should be called if the authorization was not successful @see %sec:authorization-fallback(string) :) <br/>'''%sec:requires-principal(string,string)''' <br/> (: Enforces an authentication but no authorization :) <br/>'''%sec:requires-login()''' <br/> (: The default authorization fallback function. The function must not have any arguments :) <br/>(: relevant information like the current username might be available through additional xquery function in the security module :) <br/>'''%sec:authorization-fallback()''' <br/> (: An authorization fallback function addressable for %sec:requires-principal(string,string) by given id. The function must not have any arguments :) <br/>(: relevant information like the current username might be available through additional xquery function in the security module :) <br/>'''%sec:authorization-fallback(string)''' <br/> (: The default authentication fallback function. The function must not have any arguments :) <br/>'''%sec:authentication-fallback()''' <br/>