[Ssc-dev] Authentication, Authorization and Architecture

[Lee Azzarello]

I'm thinking specifically about the authorization and distributed
system architecture as high end. Authentication can probably be high
end for all users of the public API.

-lee

On Wed, Mar 6, 2013 at 6:31 PM, Harlo Holmes <harlo.holmes at gmail.com> wrote:
> I'd like to think that, as far as this authentication module is concerned,
> every client should get the "high end". I also expect that we can extend
> this to the glsp build as well, as the project is slated to be done in
> january 2014.
>
> On Mar 6, 2013 5:14 PM, "Lee Azzarello" <lee at rockingtiger.com> wrote:
>>
>> I have some colleagues in this field but I would need to know the
>> value of bringing in someone for this role. I just spoke to Hans about
>> some of the different clients for InformaCam and it looks like there
>> will be a clear "low end" and "high end". This is a compelling case to
>> develop components that can be installed for different levels of
>> complexity.
>>
>> -lee
>>
>> On Wed, Mar 6, 2013 at 4:58 PM, Harlo Holmes <harlo.holmes at gmail.com>
>> wrote:
>> > that's a great idea, Bryan!
>> >
>> >
>> > On Wed, Mar 6, 2013 at 4:53 PM, Bryan Nunez <bryan at witness.org> wrote:
>> >>
>> >> I'm not sure if there are existing libraries, but if we are looking for
>> >> an
>> >> advanced math/cs person I can ask the people at the AAAS volunteer
>> >> scientists program, who've offered to help in the past.
>> >>
>> >> -b
>> >>
>> >> On Wed, Mar 6, 2013 at 4:28 PM, Hans-Christoph Steiner
>> >> <hans at guardianproject.info> wrote:
>> >>>
>> >>>
>> >>> Aren't there existing libraries for this kind of thing?  A new,
>> >>> complex
>> >>> auth
>> >>> API that needs to be secure sounds like a very large project.
>> >>>
>> >>> .hc
>> >>>
>> >>> On 03/06/2013 04:22 PM, Lee Azzarello wrote:
>> >>> > Barbra and I met today about the problems we're facing with
>> >>> > authentication, authorization and architecture for the InformaCam
>> >>> > backend.
>> >>> >
>> >>> > We decided to continue on two concurrent paths. She'll design both
>> >>> > the
>> >>> > public and private APIs and I'll design the security using the APIs
>> >>> > as
>> >>> > a black box.
>> >>> >
>> >>> > Due to the potential complexity, specifically around authorization,
>> >>> > I
>> >>> > would like to propose bringing in an advanced math/CS expert in
>> >>> > authorization rules for large scale distributed systems. Is this a
>> >>> > possibility? A candidate would be someone with complex transaction
>> >>> > processing experience in a distributed environment under the
>> >>> > constraints of hundreds of access rules.
>> >>> >
>> >>> > Regards,
>> >>> > Lee
>> >>> > _______________________________________________
>> >>> > Ssc-dev mailing list
>> >>> >
>> >>> > Post: Ssc-dev at lists.mayfirst.org
>> >>> > List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>> >>> >
>> >>> > To Unsubscribe
>> >>> >         Send email to:  Ssc-dev-unsubscribe at lists.mayfirst.org
>> >>> >         Or visit:
>> >>> >
>> >>> > https://lists.mayfirst.org/mailman/options/ssc-dev/hans%40guardianproject.info
>> >>> >
>> >>> > You are subscribed as: hans at guardianproject.info
>> >>> >
>> >>> _______________________________________________
>> >>> Ssc-dev mailing list
>> >>>
>> >>> Post: Ssc-dev at lists.mayfirst.org
>> >>> List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>> >>>
>> >>> To Unsubscribe
>> >>>         Send email to:  Ssc-dev-unsubscribe at lists.mayfirst.org
>> >>>         Or visit:
>> >>> https://lists.mayfirst.org/mailman/options/ssc-dev/bryan%40witness.org
>> >>>
>> >>> You are subscribed as: bryan at witness.org
>> >>
>> >>
>> >>
>> >>
>> >> --
>> >> Bryan Nunez
>> >> Technology Manager
>> >> WITNESS
>> >> +1 (718) 783-2000 x-348
>> >> GPG ID: 54E3286C7C631254
>> >> GPG Fingerprint: 6115 6A41 0F5A 9AA0 67B6 79D8 54E3 286C 7C63 1254
>> >>
>> >> Check out our Human Rights Channel on YouTube
>> >>
>> >> _______________________________________________
>> >> Ssc-dev mailing list
>> >>
>> >> Post: Ssc-dev at lists.mayfirst.org
>> >> List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>> >>
>> >> To Unsubscribe
>> >>         Send email to:  Ssc-dev-unsubscribe at lists.mayfirst.org
>> >>         Or visit:
>> >>
>> >> https://lists.mayfirst.org/mailman/options/ssc-dev/harlo.holmes%40gmail.com
>> >>
>> >> You are subscribed as: harlo.holmes at gmail.com
>> >>
>> >
>> >
>> > _______________________________________________
>> > Ssc-dev mailing list
>> >
>> > Post: Ssc-dev at lists.mayfirst.org
>> > List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>> >
>> > To Unsubscribe
>> >         Send email to:  Ssc-dev-unsubscribe at lists.mayfirst.org
>> >         Or visit:
>> >
>> > https://lists.mayfirst.org/mailman/options/ssc-dev/lee%40guardianproject.info
>> >
>> > You are subscribed as: lee at guardianproject.info
>> >