On 6 Aug 2009, at 11:52, Torgeir Veimo wrote:
2009/8/6 Ian Boston <[email protected]>:
With multi tenancy support in Sling, Is delegated group
administration
something that Sling should care about, or is the generic use case
to only
allow centralized group administration ?
Delegated group administration has a good number of use cases, so it
would be easier if this was supported out of the box.
AFAICT, to do it out of the box will require moving the security from
within the core UserManager into the servlets that modify groups
(using an admin session in those servlets).
This just doesnt feel right as the "correct" way of doing things.
IMHO, Security *should* be managed by the SecurityManager objects for
the security workspace, not bypassed.
Ian
--
-Tor
