[
https://issues.apache.org/jira/browse/SYNCOPE-1630?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342530#comment-17342530
]
ASF subversion and git services commented on SYNCOPE-1630:
----------------------------------------------------------
Commit 2e23b2a5e72141bc7752b2ba721677090754fed5 in syncope's branch
refs/heads/master from Francesco Chicchiriccò
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=2e23b2a ]
[SYNCOPE-1630] Fix additions to default content
> Use Group owners to extend Delegated Administration
> ---------------------------------------------------
>
> Key: SYNCOPE-1630
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1630
> Project: Syncope
> Issue Type: Improvement
> Components: console, core, documentation
> Reporter: Francesco Chicchiriccò
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 2.1.10, 3.0.0
>
>
> Currently, [Delegated
> Aministration|http://syncope.apache.org/docs/2.1/reference-guide.html#delegated-administration]
> is based on Realms and Dynamic Realms.
> The former is quite static but widely used; the latter is extremely flexible
> but not used in any deployment, in practice, because it quickly becomes slow
> with real numbers.
> An idea is to put in place some form of group-based authorization model: user
> A is allowed to administer user B if (a) B is member of group G (b) A is
> owner of G.
> One advantage of such approach is that no changes in persistence would be
> needed.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
