Hi all,

It is better add the following functionality UserManager, because they
are required by Registry and Mashup. 

* Add a Admin Role. Users in admin Role can do any action/resource and
cannot be deleted by users.
* Enable a user to edit and read himself

I have attached the exact method signatures.

Thank you,
Dimuthu
class AuthorizingRealmConfig {

.....................
...............
   //new methods
   /**
     * Users with Admin Role cannot be deleted, edited, read by other normal 
users.
     * If a user has the Admin Role he will be authorized to do anything. 
     * i.e. isUserAuthorized() method will return true to every 
resource/action.  
     * Admin role users can be edited/deleted and read by other admin role 
users only.
     * @param adminRoleName
     * @param isRemovable
     */
    public void enableAdminRole(String adminRoleName) {

    }
    
    /**
     * Current user permission on himself when editing/reading data
     * @param readable - Let current user read his properties
     * @param editable - Let current user edit his properties/password
     */
    public void enablePermissionOnCurrentUser(boolean readable,
            boolean editable) {

    }
}
_______________________________________________
Commons-dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/commons-dev

Reply via email to