I am new to Apache Fortress (and LDAP), and very hooked! Great work!
I am experimenting with
<addcontext>
    <context name="Client123"/>
</addcontext>

I try to understand the different ways to do multi-tenancy.
One for apps could be simply to create a new partition in the LDAP - I have 
some success with that.
Each company using the app wants to define their own roles, so I thought of 
using context. With the ant-script in core I can load into a specific context. 
Does that mean that A/RBAC structure and the permissions have to be duplicated 
to each context? Permissions have to be the same within one application, of 
course.
I am having trouble with getting the realm and/or the web-admin to behave 
nicely. How should they be configured? It seems that for instance web-admin 
have hardcoded "HOME" in applicationContext and that J2eePolicyMgrImpl in the 
real is hardcoded to GlobalIds.HOME.
Is there a right way to handle multiple tentants and contexts?
How do I make the web-admin avare of contexts? - Will I have to deploy an 
instance for each context and LDAP-partition?

Reply via email to