[ 
https://issues.apache.org/jira/browse/SLING-6219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15622492#comment-15622492
 ] 

Bertrand Delacretaz commented on SLING-6219:
--------------------------------------------

Do we really want cleartext passwords in the provisioning model?

I understand this makes sense for sample apps, but not beyond that - maybe we 
need an "unsafe" setting in the JCR RepositoryInitializer, that sample apps can 
activate to enable such things? And without it enable only generated passwords, 
though I'm not sure how people can use those accounts then.

> Allow to create users with repoinit
> -----------------------------------
>
>                 Key: SLING-6219
>                 URL: https://issues.apache.org/jira/browse/SLING-6219
>             Project: Sling
>          Issue Type: New Feature
>          Components: JCR, Repoinit
>            Reporter: Carsten Ziegeler
>             Fix For: Repoinit Parser 1.0.4, Repoinit JCR 1.0.4
>
>
> it seems it's not possible to create a user through the repoinit. 
> This would be very useful for sample apps and testing. For example, the
> slingshot sample app currently needs an admin user to create the sample
> user accounts. And therefore slingshot needs to be in the whitelist for
> admin usage - which is not a good thing
> I suggest we add:
> create user {name}
> create user {name} {password}
> delete user {name}
> If no pw is provided for create user, we create a random pw



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to