[Design] [Decision][Cosmo] No ticket + password option for Beta
sheila at osafoundation.org
Wed Sep 6 17:24:08 PDT 2006
After reviewing all the list discussions on this topic and thinking
about it further, the product team has decided NOT to move forward
with the proposal for adding an optional password when we publish a
share to Cosmo. This proposal came about in an attempt to address
some of the security concerns that came out through various
discussions. We wanted to offer an alternative that people would feel
was more secure than just tickets AND was implementable in the Beta
timeframe. It became clear that we didn't really accomplish this goal
and working towards a better 1.0 solution using ACLs is really where
we should be focussing our efforts.
So, for Beta, we will stick with the ticket solution we currently
have and both desktop and web client users are able to subscribe to a
share WITHOUT setting up an account on Cosmo as long as they have a
valid read only or read write ticket. Of course, anyone is free to
signup for an account on Cosmo but we will not force users to do this.
I understand this decision is not everyone's first choice, and I
appreciate everyone's willingness to respect it and move on.
It is worth pointing out that for any decision at OSAF, if someone
feels the decision is a big enough problem to have a significant
negative impact on the project, they are welcome to bring up the
issue to the OSAF Operations team for review by emailing ops-
wg at osafoundation.org.
More information about the Design