hi Martin,

ok that's my last comment until next wednesday :-D

Now I'd like to know if the current login user name is
available after login in later stages, such as when approving
CSRs (as RA operator) or when issuing CSRs/CRRs (as normal user).

Actually not directly. If you call the function getRole at the access control object then you get the user if map_role is off but it is no problem to add a function getUser to the access control which simply returns $self->{ident}->{name}.


Reason:
After I logged in successfully I want to insert at least the
user id (and perhaps more information) into all requests the
user enters, to make it possible for the RA admin to verify
from whom the request comes from.

Sounds reasonable.

In addition I'd like to add the RA admin ID to requests the RA admin
approves without signing, to make these changes transparent to
CA operator staff and auditing.

Good idea.

I am also thinking of querying external data sources for the
logged in user data and integrate this information into the new
CSR or CRR request.
Where would be the canonical place to implement this query?

Hope I am not bugging you folks too hard :-)

I just commited the function getUser and your patch. BTW please don't close an RFE if you don't commited the patch because it is horrible to search for closed stuff :)


Have a nice weekend

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org


------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ OpenCA-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to