[Yanel-dev] User and Group Management

[Paloma Gomez]

> Hi all,
>
> I've added interfaces and a yarep-based implementation for user and
> group management to the security package. It allows to add/modify/delete
> users and groups, and to manage the membership of users to groups.
>
> Paloma, do you think it would be a lot of work to modify your
> UserResource to use this API?

I'll be happy to do it. IMHO the YanelUserResource + User/Group Interfaces
+ File System based impl of User/Group is the cleanest way of implementing
the ac. In fact, I was waiting for a decision on the Identity/User issue
to actually do it. Thanks very much for your work :-)

>
> I made the UserManager and the GroupManager accessible via the
> IdentityManager:
>      identityManager.getUserManager()
> and
>      identityManager.getGroupManager()
> I'm not completely happy with that, any suggestions on how to improve
> this are welcome. Should those two managers be instantiated via spring
> instead?

I am not sure. The identity and policy manager used to be instantiated via
spring, but now this has been commented out (Yanel.java) and  their
corresponding factories are the ones which are instantiated via spring.
Maybe instantiating some managers using spring and others without wouldn't
be consistent. Just an idea.


HTH,
Paloma

>
> If the new api is approved, I will make a few minor modifications to
> YanelServlet, to correctly get the User and its Groups after logging in.
> This should then allow to set policies based on groups.
>
> Any feedback is welcome.
>
> josias
>
> _______________________________________________
> Yanel-development mailing list
> Yanel-development at wyona.com
> http://wyona.com/cgi-bin/mailman/listinfo/yanel-development
>
>