[Cosmo-dev] [Decision][Cosmo] No ticket + password option for Beta

Sheila Mooney sheila at osafoundation.org
Wed Sep 6 17:24:08 PDT 2006


After reviewing all the list discussions on this topic and thinking  
about it further, the product team has decided NOT to move forward  
with the proposal for adding an optional password when we publish a  
share to Cosmo. This proposal came about in an attempt to address  
some of the security concerns that came out through various  
discussions. We wanted to offer an alternative that people would feel  
was more secure than just tickets AND was implementable in the Beta  
timeframe. It became clear that we didn't really accomplish this goal  
and working towards a better 1.0 solution using ACLs is really where  
we should be focussing our efforts.

So, for Beta, we will stick with the ticket solution we currently  
have and both desktop and web client users are able to subscribe to a  
share WITHOUT setting up an account on Cosmo as long as they have a  
valid read only or read write ticket. Of course, anyone is free to  
signup for an account on Cosmo but we will not force users to do this.

I understand this decision is not everyone's first choice, and I  
appreciate everyone's willingness to respect it and move on.
It is worth pointing out that for any decision at OSAF, if someone  
feels the decision is a big enough problem to have a significant  
negative impact on the project, they are welcome to bring up the  
issue to the OSAF Operations team for review by emailing ops- 
wg at osafoundation.org.

Cheers,
Sheila



More information about the cosmo-dev mailing list