> On Oct 12, 2016, at 9:27 PM, Chris Pike <clp...@psu.edu> wrote:
> I noticed that all of the fortress entities have the ftProperties object
> class in LDAP, which means that they can all contain many ftProps. Is that
> correct? Are the ftProps meant to be user defined defined properties? If so,
> does the API provide any mechanism to set or query by these properties?
The props aux obj class:
## AC2: Fortress Properties Auxiliary Object Class
objectclass ( ftAxId:2
DESC 'Fortress Properties AUX Object Class'
Is allowed on AdminRole, Config, PermObj, PermOp, Role and User entities.
But there is only code written on Config, PermObj and Users which allow some
level of adding and updating props. No APIs for search at the moment - except
for Config which of course is just an entity containing properties.
I would be in support of expanding the usage of properties as long as there
aren’t business rules associated with it. For example it would be fine to have
apis to perform generic searches on property names / values
List<FortEntity> searchEntity(propName, PropValue
I would also support adding code to implement the property capability on the
other entities, both those listed above and those not.
For me the general idea of a property is that we offer apis for CRUD but don’t
interpret the value of a property on behalf of the caller. That is the caller
pulls it back and it is up to it to decide what to do with it.