Tran Hong Quan created JAMES-4098:
-------------------------------------

             Summary: Multi-valued administratorIds
                 Key: JAMES-4098
                 URL: https://issues.apache.org/jira/browse/JAMES-4098
             Project: James Server
          Issue Type: Improvement
          Components: UsersStore & UsersRepository
            Reporter: Tran Hong Quan


h2. Why?

For example a real administration use case:

We need a user to run the migration.

And also expose a distinct user with full access to user accounts for the 
customer to be using in investigation.

The current configuration format does not allow for this.

CF: 
{code:java}
<usersrepository name="LocalUsers"
  class="ReadOnlyUsersLDAPRepository"
  ldapHost="ldaps://XXXXX"
  userBase="ou=users,o=gov,c=mu"
  principal="XXXXX"
  credentials="XXXXXXXXXXX"
  userIdAttribute="mail"
  userObjectClass="twakeAccount"
  administratorId="xxx...@xxxx.org"
  trustAllCerts="true"
  
filter="(twakeAccountStatus=cn\3Dactive\2Cou\3DtwakeAccountStatus\2Cou\3Dnomenclature\2Co\3Dgov\2Cc\3Dmu)">
  <enableVirtualHosting>true</enableVirtualHosting>
</usersrepository>{code}
h2. 
What

Support multi-valued administratorId:
{code:java}
<usersrepository name="LocalUsers"
  class="ReadOnlyUsersLDAPRepository"
  ldapHost="ldaps://XXXXX"
  userBase="ou=users,o=gov,c=mu"
  principal="XXXXX"
  credentials="XXXXXXXXXXX"
  userIdAttribute="mail"
  userObjectClass="twakeAccount"
  trustAllCerts="true"
  
filter="(twakeAccountStatus=cn\3Dactive\2Cou\3DtwakeAccountStatus\2Cou\3Dnomenclature\2Co\3Dgov\2Cc\3Dmu)">
  <enableVirtualHosting>true</enableVirtualHosting>
  <administratorIds>
    <administratorId>xxx...@xxxx.org</administratorId>
    <administratorId>yyy...@yyyy.org</administratorId>
  </administratorIds>
</usersrepository>{code}
 

Of course, retro-compatibility must be preserved.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to