Declarative security (same as to the mechanism found in Servlet and EJB specs)
The JavaTM Portlet specification will be built on top of the JavaTM Servlet specification. It is envisioned that the developer API will be similar to the JavaTM Servlet API.
The Expert group will consider functionality such as support for, parallel execution of Portlets within the Desktop, logging, security and personalization.
The Expert group will decide if the specification should include a set of specialized Portlet implementations for common tasks such as syndication (RSS), HTML
scrapper, Web Services access, etc.
The Expert Group will evaluate defining a Credential mapping service to allow the Portal application to access resources in other applications -not supporting the notion
of distributed sessions- on behalf of user.
It is understood that the subject of this JSR is already being addressed by Open Source projects and products from different vendors. The Objective of this JSR is to
create a standard for Java Portal Applications, which will help unifying a fragmented area. The expert group will ensure this specification draws appropriately from such
projects and products.
2.2 What is the target Java platform? (i.e., desktop, server,
personal, embedded, card, etc.)
A JavaTM extension for the J2EE 1.4 platform.
2.3 What need of the Java community will be addressed by the
proposed specification?
This specification will establish a standard API for creating Portlets, thus avoiding locking in Portal developers in a specific implementation and allowing Portlets
developers to reach a wider audience while reducing their development efforts.
2.4 Why isn't this need met by existing specifications?
While the Servlet/JSP specifications define an include mechanism for aggregating Servlets and JSPs, they do not define the Desktop metaphor where this
aggregation happens. Neither the Servlet/JSP specifications define the possible states and transitions of an included Servlet or JSP, or how the state of one Servlet
or JSP affects the display of the other included Servlets or JSPs. In addition, The Servlet/JSP specifications do not define a personalization interface or the idea
of persisting the personalization information.
The JavaTM Server Faces (JSR 127) aims to define a standard, MVC based, Web GUI framework focusing on the UI components (input fields, lists, buttons,
etc.) and their event model. However, it does not address aggregation, security and personalization.
2.5 Please give a short description of the underlying technology or
technologies:
The JavaTM Portlet specification will be designed leveraging the following technologies: XML, JAXP, Java Servlet/JSP, JAAS and other J2EE technologies.
For example, JavaTM Server Faces could be used by a Portlet developer to render the Portlet's content. In addition, JavaTM Server Faces could be used by a Portal vendor
to implement the rendering of the Portal desktop.
For a description of the JavaTM Portlet technology, refer to section 2.1.
2.6 Is there a proposed package name for the API Specification?
(i.e., javapi.something, org.something, etc.)
javax.portlet.
2.7 Does the proposed specification have any dependencies on
specific operating systems, CPUs, or I/O devices that you know of?
No
2.8 Are there any security issues that cannot be addressed by the
current security model?
No
2.9 Are there any internationalization or localization issues?
Yes. APIs and descriptors to support internationalization and localization are a fundamental design goal of this JSR.
2.10 Are there any existing specifications that might be rendered
obsolete, deprecated, or in need of revision as a result of this
work?
No
2.11 Please describe the anticipated schedule for the development of
this
specification.
To be determined by the expert group, initial target is December 2002.
2.12 Please describe the anticipated working model for the Expert
Group working on developing this
specification.
We anticipate a mixture of mailing list and occasional face to face or teleconference meetings.
Section 3: Contributions
3.1 Please list any existing documents, specifications, or
implementations that describe the technology. Please include links to
the documents if they are publicly available.
Different implementations are available today, the following list enumerates some of them:
Apache Software Foundation: Jakarta JetSpeed 1.3
http://jakarta.apache.org/jetspeed/site/index.html
BEA: Web Logic Portal 4.0
http://www.bea.com/products/weblogic/portal/index.shtml
IBM: WebSphere Portal 1.2
http://www-4.ibm.com/software/webservers/portal/
iPlanet: iPlanet Portal Server 3.0
http://www.iplanet.com/products/iplanet_portal/home_portal.html
Oracle: Oracle 9i Portal
http://www.oracle.com/ip/deploy/ias/portal/index.html
3.2 Explanation of how these items might be used as a starting point
for the work.
They will be useful for gathering features and evaluating the effectiveness and shortcoming of each implementation.