I started looking at the UserManager and Permissions and have a
couple immediate questions...
Is the set of possible actions finite and known (when roller is
compiled) or is it extensible by the user? If it's known I'm going
to propose essentially a bitset implementation for actions.
Are the following really intentional?
new GlobalPermission(Arrays.emptyList()).implies(new GlobalPermission
(Arrays.singletonList("ADMIN"))) == true
new GlobalPermission(Arrays.singletonList("FOO")).implies(new
GlobalPermision(Arrays.singletonList("BAR"))) == true
and many other similar examples with WebLogPermission. This seems to
me like asking for trouble.
thanks
david jencks
