[
https://issues.apache.org/jira/browse/SLING-5355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15052888#comment-15052888
]
Bertrand Delacretaz commented on SLING-5355:
--------------------------------------------
Here's the draft mini-language as discussed on our dev list:
a) Creating service users (this one is definitely a micro-language ;-)
Maybe we need an {{ensure}} keyword to indicate that users might already exist.
And maybe also include the necessary information to create the relevant
{{ServiceUserMapper}} configurations.
{code}
# comments and blank lines are supported of course
create service user printService,someService
delete service user printService,anotherService
{code}
b) Setting ACLS from our provisioning model:
{code}
# comments and blank lines are supported of course
set ACL on /libs,/apps with glob */install/*
remove * for user1,user2
allow jcr:read for user1,user2
deny jcr:write for user2
deny jcr:lockManagement for user1
end
{code}
> Create service users and ACLs from the provisioning model
> ---------------------------------------------------------
>
> Key: SLING-5355
> URL: https://issues.apache.org/jira/browse/SLING-5355
> Project: Sling
> Issue Type: New Feature
> Components: Service User Mapper
> Reporter: Bertrand Delacretaz
> Assignee: Bertrand Delacretaz
>
> As discussed in the "Removing loginAdministrative, how to test that, and
> service username conventions" thread on our dev list [1] we need to be able
> to create service users and set the corresponding ACLs from our provisioning
> model.
> This should be implemented using distinct utility classes, one for the users
> and one for the ACLs, that take simple mini-languages as input. This will
> allow for reusing these utilities in test code for example.
> I have made a suggestion for those mini languages in that thread, will copy
> them here once we agree.
> [1] http://markmail.org/message/kcvuhwfdald2dyuz
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
