[
https://issues.apache.org/jira/browse/SLING-1453?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eric Norman resolved SLING-1453.
--------------------------------
Resolution: Fixed
Committed in r925392. Plus updated the bundle documentation.
> Provide AuthorizablePrivilegesInfo service to help user/group management
> scripts query what the current user is allowed to do
> -----------------------------------------------------------------------------------------------------------------------------
>
> Key: SLING-1453
> URL: https://issues.apache.org/jira/browse/SLING-1453
> Project: Sling
> Issue Type: Improvement
> Components: JCR
> Affects Versions: JCR Jackrabbit User Manager 2.0.6
> Reporter: Eric Norman
> Assignee: Eric Norman
> Fix For: JCR Jackrabbit User Manager 2.0.6
>
>
> Scripts that need to modify users or groups often need to know (user/group)
> actions the the current user is provisioned to perform to conditionally
> render sections of the page. To assist in that end, an
> AuthorizablePrivilegesInfo service should assist the script writer in
> determining what is possible.
> The service interface will contain these methods:
> /**
> * Checks whether the current user has been granted privileges
> * to add a new user.
> *
> * @param jcrSession the JCR session of the current user
> * @return true if the current user has the privileges, false otherwise
> */
> boolean canAddUser(Session jcrSession);
> /**
> * Checks whether the current user has been granted privileges
> * to add a new group.
> *
> * @param jcrSession the JCR session of the current user
> * @return true if the current user has the privileges, false otherwise
> */
> boolean canAddGroup(Session jcrSession);
>
> /**
> * Checks whether the current user has been granted privileges
> * to update the properties of the specified user or group.
> *
> * @param jcrSession the JCR session of the current user
> * @param principalId the user or group id to check
> * @return true if the current user has the privileges, false otherwise
> */
> boolean canUpdateProperties(Session jcrSession,
> String principalId);
> /**
> * Checks whether the current user has been granted privileges
> * to remove the specified user or group.
> *
> * @param jcrSession the JCR session of the current user
> * @param principalId the user or group id to check
> * @return true if the current user has the privileges, false otherwise
> */
> boolean canRemove(Session jcrSession,
> String principalId);
>
> /**
> * Checks whether the current user has been granted privileges
> * to update the membership of the specified group.
> *
> * @param jcrSession the JCR session of the current user
> * @param groupId the group id to check
> * @return true if the current user has the privileges, false otherwise
> */
> boolean canUpdateGroupMembers(Session jcrSession,
> String groupId);
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
