Re: AnyType Role assignment to Groups

[Francesco Chicchiriccò]

On 07/02/2017 11:55, Colm O hEigeartaigh wrote:

Hi Francesco,

On Mon, Feb 6, 2017 at 10:31 AM, Francesco Chicchiriccò 
> wrote:



- OR create a condition "User U is dynamically assigned
CustomRole R because he is member of Group G”. I don’t find
the way how to define this condition in Syncope.


Only group memberships and role assignments can be static or dynamic.


Would it be possible to make this more flexible without changing a lot 
of code? If a user can have a UserCustomRole relationship to a 
CustomRole, then if the user is a member of group G then the 
relationship is dynamically defined between the user and CustomRole. 
It seems like a useful thing to be able to do to me or is there a 
technical reason why it can't be done?


So, you're essentially proposing to add the possibility to specify 
relationships between Groups and Any Objects (at the moment, only Users 
/ Any Objects and Any Objects / Any Objects).
The semantic should be that if group G has relationship R with Any 
Object A, all users and any objects in G will have such relationship with A.


It is indeed feasible, but it will require some modifications in the 
data model, JPA implementation, data binder and finally admin console.

Something not trivial but definitely doable.

Moreover, since it involves modifications in the database structure, I 
would see it for 2.1.0 at earliest.


Regards.

--
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/

Re: AnyType Role assignment to Groups

[Colm O hEigeartaigh]

Hi Francesco,

On Mon, Feb 6, 2017 at 10:31 AM, Francesco Chicchiriccò  wrote:


> - OR create a condition "User U is dynamically assigned CustomRole R
>> because he is member of Group G”. I don’t find the way how to define this
>> condition in Syncope.
>>
>
> Only group memberships and role assignments can be static or dynamic.


Would it be possible to make this more flexible without changing a lot of
code? If a user can have a UserCustomRole relationship to a CustomRole,
then if the user is a member of group G then the relationship is
dynamically defined between the user and CustomRole. It seems like a useful
thing to be able to do to me or is there a technical reason why it can't be
done?

Colm.



>
>
> Or maybe I can create and assign CustomRoles in Syncope in another way?
>> Like without AnyTypes?
>>
>> Detailed instructions would help me very much.
>>
>> Thank you!
>>
>> Sabina Mirauta
>>
>
> --
> Francesco Chicchiriccò
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Member at The Apache Software Foundation
> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
> http://home.apache.org/~ilgrosso/
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: syncope-standalone maven artifact not available

[Adrian Gonzalez]

Hi Francesco,
> Hope this clarifies.O yes, thanks !
I was getting the syncope-standalone from maven (with maven dependency plugin), 
it worked on SNAPSHOT, not on RELEASE - my bad !I'll switch to the syncope 
maven archetype.
Thanks !

  De : Francesco Chicchiriccò 
 À : user@syncope.apache.org 
 Envoyé le : Mardi 7 février 2017 7h42
 Objet : Re: syncope-standalone maven artifact not available
   
 On 06/02/2017 19:56, Adrian Gonzalez wrote:
  
  Hello, 
  I've the impression that syncope-standalone artifact is available only in 
SNAPSHOT repo. 
  It's available from here : 
https://repository.apache.org/content/groups/snapshots/org/apache/syncope/syncope-standalone/
  
  But not from 
here:https://repo.maven.apache.org/maven2/org/apache/syncope/syncope-standalone/
 
  Am I missing a repo ?  
 
 The release process [1] deploys to the central Maven repository only the 
artifacts that can be effectively used via Maven.
 
 The standalone distribution, the Eclipse IDE Plugin, the CLI, the DEB packages 
and the GUI installer are instead downloadable via the ASF dist area [2], and 
links to ASF mirror infrastructure are provided in [3].
 
 The SNAPSHOT repository is instead populated by our Jenkins jobs [4].
 
 Hope this clarifies.
 Regards.
 
 [1] http://syncope.apache.org/release-process.html
 [2] https://www.apache.org/dist/syncope/
 [3] http://syncope.apache.org/downloads.html
 [4] https://builds.apache.org/view/S-Z/view/Syncope/
 -- 
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/