Security

OLF grasps back on the well established spring security framework. The corresponding grails plugin is very powerful due to its modularity. In its basic version it already provides user based authentication and role-based access. Currently, OLF features only two roles, namely ordinary users and administrators. Authentication works either via a login form or optionally via a CAS authentication server. Alternative authentication methods such as OpenID, facebook, LDAP, etc. can easily be added. Additional roles could also be added easily to achieve a more fine-grained control. For the future, however, it is planned to include support for the ACL plugin, which would allow for an object-centric view on security.