anchela commented on code in PR #604:
URL: https://github.com/apache/jackrabbit-oak/pull/604#discussion_r906235237
##########
oak-auth-external/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.java:
##########
@@ -78,6 +84,14 @@
label = "External Identity Protection",
description = "If disabled rep:externalId properties won't be
properly protected (backwards compatible behavior). NOTE: for security reasons
it is strongly recommend to keep the protection enabled!",
boolValue =
ExternalIdentityConstants.DEFAULT_PROTECT_EXTERNAL_IDS),
+ @Property(name = PARAM_PROTECT_EXTERNAL_IDENTITIES,
+ label = "External User and Group Protection",
+ description = "If 'None' is selected the synchronized external
users/groups won't be protected (backwards compatible behavior) and can be
edited like local users/groups. NOTE: in order to avoid having inconsistencies
between the IDP that defines the external identities and local synced
identities it is recommend to enable the protection. With option 'Warn' the
protection is disabled by warnings will be logged.",
Review Comment:
good catch! thanks.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
