RE: patch for auto-create-users

2004-05-06 Thread Mortimore, Jamie [IT]
nk. Jamie. -Original Message- From: Jamie Mortimore [mailto:[EMAIL PROTECTED] Sent: 26 April 2004 13:06 To: Slide Users Mailing List Subject: Re: patch for auto-create-users On Mon, 2004-04-26 at 10:52, Martin Holz wrote: > > I added a createUser method to the Content interface an

Re: patch for auto-create-users

2004-04-27 Thread Ryan Rhodes
Martin Holz wrote: Don't use SlideRealm. The slide realm makes user/password combinations available to the servlet container. I am not grasping this part. You mean that slide realm becomes the store for usernames/passwords that the servlet container authenticates against? Any realm does not ha

Re: patch for auto-create-users

2004-04-27 Thread Martin Holz
"Ryan Rhodes" <[EMAIL PROTECTED]> writes: > Well, I should restate that. I do need roles. I was actually hoping > to use SlideRealm, because I want other parts of the webapp to use > Slide roles for access control. > > > The only reason I need LDAP is because usernames/passwords must all > co

Re: patch for auto-create-users

2004-04-27 Thread Ryan Rhodes
-Ryan From: Martin Holz <[EMAIL PROTECTED]> Reply-To: "Slide Users Mailing List" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: patch for auto-create-users Date: 27 Apr 2004 17:32:51 +0200 "Ryan Rhodes" <[EMAIL PROTECTED]> writes: > I went through

Re: patch for auto-create-users

2004-04-27 Thread Martin Holz
"Ryan Rhodes" <[EMAIL PROTECTED]> writes: > I went through the same progression as Jamie with auto-create-users. > It would have been nice to have when I started, but it doesn't add > anything now since I ultimately need the LDAP sync'd setup as well. > > Could you give an idea of just how much

Re: patch for auto-create-users

2004-04-27 Thread Ryan Rhodes
Daniel Florey wrote: It is possible to assign different stores to different scopes (like mount points), so you don't need the proxy thing. So the main task would be to write a LDAP-store. To have such a store would be really a great thing so that users and roles are stored only in one physical

Re: Controlling Slide cache, was Re: patch for auto-create-users

2004-04-27 Thread Oliver Zeigermann
ExtendedStore allows you to invalidate entries. Subclass it and add your code that talks to your client store to find out which entries to delete. Use something like getTxCache().remove(null, [key to be invalidated] on objectsCache, permissionsCache, etc. Oliver Carlos Villegas wrote: Hi, Da

Controlling Slide cache, was Re: patch for auto-create-users

2004-04-27 Thread Carlos Villegas
Hi, Daniel Florey wrote: If LDAP provides some notification mechanism for informing slide about user/role updates additional user/role caching would be possible to achieve better performance. I have a custom store that gets user/role info from an external source. I set it up in the Domain.xml

Re: patch for auto-create-users

2004-04-27 Thread Daniel Florey
imply making sure no user had any write permissions? -Original Message- From: Martin Holz [mailto:[EMAIL PROTECTED] Sent: 26 April 2004 13:49 To: [EMAIL PROTECTED] Subject: Re: patch for auto-create-users Daniel Florey <[EMAIL PROTECTED]> writes: Hi, I'd propose to add the meth

RE: patch for auto-create-users

2004-04-27 Thread Mortimore, Jamie [IT]
slide and listen for updates on LDAP to keep the two in sync. Could you not make a store read-only by simply making sure no user had any write permissions? -Original Message- From: Martin Holz [mailto:[EMAIL PROTECTED] Sent: 26 April 2004 13:49 To: [EMAIL PROTECTED] Subject: Re: patch f

Re: patch for auto-create-users

2004-04-26 Thread Martin Holz
Daniel Florey <[EMAIL PROTECTED]> writes: > Hi, > I'd propose to add the methods regarding the user/role stuff to the > Security-Interface and the SecurityImpl-class. There already are some > methods regarding user/role management (hasRole()...) This is not possible, since the methods need access

Re: patch for auto-create-users

2004-04-26 Thread Martin Holz
Jamie Mortimore <[EMAIL PROTECTED]> writes: > Are you saying there is a way webdav methods are called that do not go > through AbstractWebdavMethod.run? Is there a more appropriate place to > call the createUser method (eg at the start of WebdavServlet.service)? I think, AbstractWebdavMethod.ru

Re: patch for auto-create-users

2004-04-26 Thread Daniel Florey
Hi, I'd propose to add the methods regarding the user/role stuff to the Security-Interface and the SecurityImpl-class. There already are some methods regarding user/role management (hasRole()...) In general I think it would be better to have only one place (e.g. LDAP) where users are managed and

Re: patch for auto-create-users

2004-04-26 Thread Jamie Mortimore
On Mon, 2004-04-26 at 10:52, Martin Holz wrote: > > I added a createUser method to the Content interface and implementation, > > ContentImpl. You may decide this is not the right place for a create > > user method if Content is only supposed to handle more low level > > operations. In which case th

Re: patch for auto-create-users

2004-04-26 Thread Martin Holz
Jamie Mortimore <[EMAIL PROTECTED]> writes: > The user would be created if the getPrincipal method was called from > within a transaction but the newly created user would not be setup with > the correct role. For example it would create the user if you perform a > PUT method with the new user but

Re: patch for auto-create-users

2004-04-26 Thread Jamie Mortimore
Hi Oliver, With the auto-create-users functionality enabled the SecurityImpl.getPrincipal method would try to create a user in slide if the current user was not set up in slide. There were a couple of problems with this. Firstly not all webdav methods require a transaction but the creation of a

Re: patch for auto-create-users

2004-04-26 Thread Oliver Zeigermann
Hi Jamie! Thanks for the patch :) In order for me to evaluate could you please explain what you did in the patch and why? What exactly was broken and what did you fix? For future contributions could you please create the diffs using -u instead of -c? Thanks again, Oliver Jamie Mortimore wro