A quick update on this topic.
After not getting any single response from OpenJPA community [2], and
having considered that a slice-based implementation would have bound
Syncope to non-standard OpenJPA features, I have preferred to rollback
and change design.
Instead of mapping domains to OpenJPA slices, now domains are mapped to
EntityManagerFactory instances, since each domain is considered a
separated JPA persistence unit.
Physical separation of tables for different domains and support for
heterogeneous domains (domain A on MySQL, domain B on Oracle, ...) are
still available.
This new approach required some hook at Spring level [4] which
dynamically "injects" the domain into @Transactional annotations,
depending on the requesting user.
The feature branch [3] now has all tests passing, even though some
refinements are still in progress.
I'll keep you posted.
Regards.
On 17/07/2015 14:46, Francesco Chicchiriccò wrote:
Hi all,
as you might have seen, I am working on SYNCOPE-652 for implementing
multi-tenancy [1].
The idea is to set the "domain" property in Spring Security's
SecurityContext - so that such information it is available throughout
the whole system, after authentication - based on the value for the
new "X-Syncope-Domain" HTTP header (when missing, "Master" is assumed).
Such header is also included in all HTTP responses.
The domain name is then used as OpenJPA slice identifier in order to
read and write data from / to a specific slice: this allows physical
separation for different domains' data.
The implementation work is going quite straightforward, but I've spent
the last three days struggling with slices - see this thread on
OpenJPA's users@ [2].
At the moment, in a separate feature branch [3] I have all unit tests
succeeding, but still few problems with integration tests.
I'll keep you posted.
Regards.
[1]
https://cwiki.apache.org/confluence/display/SYNCOPE/%5BDISCUSS%5D+Domains
[2] http://markmail.org/message/g44f4zlpou34uvke
[3]
https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=shortlog;h=refs/heads/SYNCOPE-652
[4]
https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=blob;f=core/persistence-jpa/src/main/java/org/apache/syncope/core/persistence/jpa/spring/DomainTransactionInterceptor.java;hb=9e6f87e5da41ebd5466bf522099d3745b35703a4
--
Francesco Chicchiriccò
Tirasa - Open Source Excellence
http://www.tirasa.net/
Involved at The Apache Software Foundation:
member, Syncope PMC chair, Cocoon PMC, Olingo PMC
http://people.apache.org/~ilgrosso/
