martes, 29 de mayo de 2012

Gestión de roles en el código


Gracias a Carlos Ble.



Don’t Do Role-Based Authorization Checks; Do Activity-Based Checks




http://lostechies.com/derickbailey/2011/05/24/dont-do-role-based-authorization-checks-do-activity-based-checks/


I used to call this action-based security. However, the recent popularity in Model-View-Controller application architectures has overloaded the term “action”. Most people think of actions as controller actions because of this. While a controller action is certainly an action or activity that may have authorization needs, it’s not the only place that authorization may need to be checked. Using the term “activity” instead of action gives a little bit of differentiation and distinction, to hopefully indicate that authorization is not strictly limited to controller actions.

viernes, 18 de mayo de 2012

Dsl features sple grammar

Gramatica de features en Emftext para Sple

http://www.emftext.org/index.php/EMFText_Concrete_Syntax_Zoo_Feature_Models

miércoles, 9 de mayo de 2012

Crítica DSL

http://ruicurado.com/2009/11/25/the-hidden-costs-of-domain-specific-languages/

Ontologies, DSL and others...

Using ontology in the development of domain-specific languages http://inforum.org.pt/INForum2010/papers/compiladores-e-linguagens-de-programacao/Paper056.pdf (incluye un ejemplo de caracteristicas con dsl) Ontology Driven Development of Domain-Specific Languages http://www.doiserbia.nb.rs/img/doi/1820-0214/2011/1820-02141100019C.pdf The Hidden Costs of Domain-Specific Languages http://ayende.com/blog/2968/why-we-need-for-domain-specific-languages DSL development: 7 recommendations for Domain Specific Language design based on Domain-Driven Design http://www.theenterprisearchitect.eu/archive/2009/05/06/dsl-development-7-recommendations-for-domain-specific-language-design-based-on-domain-driven-design

26 reglas para construir DSL

Design Guidelines for Domain Specific Languages http://www.dsmforum.org/events/DSM09/Papers/Karsai.pdf