[exoplatform] How to handle user authorization

["Davide Ficano" <davide.ficano@xxxxxx>]

I'm work with eXo but some security issue is not clear.

First question: how can I change the authentication/authorization mechanisms.

Second: I don't understand how to profile navigation item menus based on 
logged user.

Suppose my navigation nodes (ie the menu shown to user) is

<node-navigation>
  <owner>user</owner>
  <node>
    <uri>/</uri>
    <name>home</name>
    <label>#{home}</label>
    <viewPermission group="/guest" membership="*"/>
    <pageReference type="text/xhtml" visible="true">user:/home</pageReference>
    <description>/</description>
 
    <node>
        <uri>/home/pageOne</uri>
        <name>pageOne</name>
        <label>#{pageOne}</label>
        <pageReference type="text/xhtml" 
visible="true">user:/home/pageOne</pageReference>
        <description>PageOne</description>
    </node>

    <node>
        <uri>/home/pageTwo</uri>
        <name>pageTwo</name>
        <label>#{pageTwo}</label>
        <pageReference type="text/xhtml" 
visible="true">user:/home/pageTwo</pageReference>
        <description>pageTwo</description>
    </node>
  </node>
</node-navigation>

I need to show 
- pageOne and pageTwo for userA
- pageOne only to userB
- pageTwo only to userC

Obviously menu right are assigned dynamic.

how this can be accomplished?

sincerely yours

dafi