Hi Martin,

And NO, I do NOT think we will need signing multiple objects, so we
shouldn't bother any longer about this.

Cool, then we can go back to single objects. This makes all much easier (at minimum for me :) ).


The next question is the signing itself. Would it be a good idea to
create a table for approved actions which includes action, object_type,
 object_id, user and method (plus data and format)? This would allow
4-eyes-principle and other things without singing. Signing could be
still added by an own table which references to the action (and not to
the object itself). The table is a first idea how to implement your
approval handle (but more generalized).

This sounds sensible, it was roughly how we did it in the other project and it proved to be useful.

So what you propose is:
                          -- 1:1 -- Action
Object -- 1:n -- Approval -- 1:1 -- Action
                          -- 1:1 -- Action

All in one line:

object -- 1:n -- approval -- 1:n -- action ?

My idea was this one:

object -- 1:n -- action -- 1:1 -- signature

action is in my understanding the operation (e.g. approval, deletion) plus the user information. So perhaps action is the wrong name. Perhaps the name approval or authorization for all is more correct. Ok, some definitions:

APPROVED - is a state of OpenCA's object lifecycle
DELETED  - is a state of OpenCA's object lifecycle
approval - is an action of an operator which authorizes data or a
           process information

So let's name it approval and always remember that this is not identical with the state approved.

Next question is the new state. If we start approving a pending request then this request is no longer pending and it is not approved. There is a state for exact this situation - signed. If we support multi approval mechanisms without signature then we should use another name than signing. Any ideas for a good statename?

Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________


------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ OpenCA-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to