Hello folks.
I am an undergraduate student of Electrical & Computer Engineering and i
want to participate in Google's Summer of Code this year.
I am a little familiar with drizzle ( I have done a low-hanging-fruit )
and I decide to purpose a project that is not on Drizzle's GSOC projects
list.
I want to implement LDAP policy plugin, which i am going to describe
right now.
Each Drizzle's schema (and each table under the schema) will have a
record in LDAP, and they will have attributes like
posixUsers/posixGroups etc.
Each user will belong to a group and he will have attributes like
posixUsers/posixGroups too.
When user "foo" want to use a Drizzle's schema "bar", drizzle's
authorization API will call policy plugin and the policy plugin after
querying in LDAP databases it will decide if the "foo" is allowed or
denied access in "bar".
Also, i am considering to add a cache in the policy plugin. Each schema
(or/and table) should know which users had access on them recently.
I am really hoping for reviews (if the idea sounds interesting) and more
ideas to improve it even more.
Warmly
Zisis
_______________________________________________
Mailing list: https://launchpad.net/~drizzle-discuss
Post to : drizzle-discuss@lists.launchpad.net
Unsubscribe : https://launchpad.net/~drizzle-discuss
More help : https://help.launchpad.net/ListHelp
