korpling/ANNIS — pull request #44 by thomaskrause (2012-10-30 15:23:13+00:00)
Title: Move authentification and authorization from frontend to service

Until now the annis-gui was responsible for authentification and authorization. The annis-service itself was not secured at all (other than only listening to localhost).

This branch moves the responsibility to the service. Thus the search functionality can be exposed to the outer world using a HTTP proxy and the service.

The branch also replaces the self made security manager with the Apache Shiro library. This powerful external library has several advantages

powerful abstraction and more fine grained access control (e.g. only allow count but not subgraph retrievial for a specific user)
much more tested implementation
support for salted passwords
integration of other authentification techniques like LDAP
administrator can configure the security model with the shiro.ini file