Security with OpenEsb

This post is about a googling on how security is handled in bpel processes. 

• http://bpel.xml.org/forum/building-bpel-with-webservices-using-cookie-for-session-management

• http://www.nabble.com/BPEL-authentication,-authorisation-and-policies-td17200281.html

• http://blogs.sun.com/pdos/entry/business_process_security_on_open

-> seems to be the first solution to try.. ordinary use of wsit runtime, seems easy..

• http://n2.nabble.com/WS-Security-in-Open-ESB-td2231059.html

• http://developers.sun.com/events/techdays/presentations/locations-2008/saopaulo/mysql_productivity/td_br_opensso_srinivas.pdf

-> a good collection of many different levels of security solutions, some of these solutions may be considered later on..

• http://wiki.open-esb.java.net/Wiki.jsp?page=HTTPBCAccessManagerAuthorization
  

svn troubleshooting: Can't open file ...\.svn\tmp\text-base\catalog.xml.svn-base':

When a Netbeans composite application is developped in linux (specifically open suse) environment, 2 catalog files are created under project directory: catalog.xml and Catalog.xml files. Linux file system is case sensitive, so this is not a problem here.. Then the project is comitted to svn. The situation is ok till here. However, when this project is checked out on a windows environment(windows xp specifically), the following error is given since windows file system is case insensitive:

Can't open file 'C:\htarakci\projects\.svn\tmp\text-base\catalog.xml.svn-base':

here is a related post: http://publicobject.com/2007/04/subversion-and-case-insensitive_15.html

So, note to myself, be careful about this!

to bpel, or not to bpel

In web applications, if you are able to do smt with html, then you won't use jsp and so on.. The rule of thumb is if you could carry out smt with a lighter,simpler technology, then choose it (at least i treat in this way). So, when we should choose bpel and when we should avoid using it and go on with ordinary web services?
this issue had been discussed here:
http://cio.ittoolbox.com/groups/strategy-planning/bpm-sp/when-to-and-when-not-to-use-bpmbpel-implementation-1947762

this evaluation is worth to note down: http://jeff-davis.blogspot.com/2007/08/whats-wrong-with-bpel.html

it has not bothered me before, but it seems that if bpel is necessary and completely handles bpm was also a controversial issue.. this is a famous article on this: http://www.infoq.com/articles/bpelbpm

btw, the title of this post is copied from here: http://dltj.org/article/bpel-in-fedora/, such a funny title:)

to sum up, i am still not sure when to use bpel :( however, now i am aware of the ongoing debates.. in fact, i also want to spend time on understanding if xml is only for data and xml should not be used to program, before going further with bpel..

OpenESB, bpel foreach

Mapper interface is a bit complicated to use until getting used to it, at least it is for me..
While using a foreach construct, just stopped and couldn't know what to do.. This post helped to some extent: http://markmail.org/message/4s3avjssz5rojddj#query:openesb%20foreach+page:1+mid:cd6derznuhs5d7xp+state:results
Still assignment from array to counter a bit problematic.. i will write down the exact solution when solved..

Edit on 17.07.2009, 02.10: Assignment from array via counter was problematic. The problem was, as the counter increments, not only the current value was copied but also previous values remained. (the to part of the assign becomes an array instead of a single value). The bug was due to


< assign name="Assign">
<copy>
<from>$GetParameterTypeListOut.parameters/return[$paramTypeCounter]</from>
<to>$GetParameterListIn.parameters/parameterType[$paramTypeCounter]</to>
</copy>
</assign>


The error is fixed when [$paramTypeCounter] part is removed from to part of the assign.

Lomboz ObjectWeb

Lomboz is a free J2EE development environment built on Eclipse.  Home page is http://lomboz.ow2.org/. The reason why i am trying it is because it provides a compact environment for bpel development by providing tomcat + ode easily. (how i prepared my own environemnt manually is here: http://hilaltarakci.blogspot.com/2009/04/eclipse-bpel-designer-apache-ode.html)

here is a lomboz demo: http://lomboz.ow2.org/bpel_demo.php

the example is at http://lomboz.ow2.org/downloads/hello.zip

( how eclipse bpel desginer could open the bpel file without its extension bpelex file? btw, bpelex is created when i changed the file :) )