Quoting Martin Holz <[EMAIL PROTECTED]>:

> Hello Martin,
> 
> "Martin Dulisch" <[EMAIL PROTECTED]> writes:
> 
> > > > Is it possible to create Groups via the WebDAV interface?  
> > > I'd like to
> > > > create a User Group and add/link users to it. K.C.
> > > 
> > > I think, there are no utility methods for doing this, but groups are
> > > normal resources with certain properties, which can be created
> > > using propatch. 
> > > 
> > 
> > Martin, are you sure? Have you tried this? Principal resources are created
> > from the referenced user database (e.g. LDAP). Whe you create a principal
> > resource it has to be written to the user database too. I have never
> heared
> > that this is possible.
> 
> No, I did not try it. If and what is possible depends on the exact setup.
> Slide gets the user from the servlet container. However to conform to the acl
> 
> specs, the user database must be mapped also to webdav resources  at /users.
> Usually you configure the container so, that every known user get access to
> the slide servlet at container level. Slide will take care for a more
> fine grained access control. 
> You can not add users to slide using the webdav API, unless the underlying
> store (or a interceptor) forwards changes to the user database used by the
> servlet container (e.g. the slide realm). 
> 

AFAIK, however, slide does not map the users to /users, but actually requires
you to create them as resources. I think this is a problem, and slide should be
mapping them for the container actually storing the users, rather than storing
them again as resources.

Last time I looked into it, users and groups could be allocated for slide simply
by creating these resources and associated properties, using standard webdav
methods.

Note that AFAIK this goes well beyond the spec, which only requires that the
users be mapped to a portion of the webdav namespace, visible to users with
sufficient priveleges, but not writeable.

> However Slide does not get the roles from the servlet container. The groups
> live 
> only in the repository. So I see no reason, you could not manipulate them
> using
> webdav PROPATCH. No changes to the user database are required.
> 

The roles are hard-wired into slide as classes, a design I do not understand at all.

The short and long of it is that there is currently no good way to allocate
users for slide. If using the SlideRealm you can create users using webdav
methods, if you know what you are doing. If using container based authentication
and a different user provider you will have to allocate the users on slide and
on the other database seperately.

Richie

> 
> Martin 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 




---------------------------
This mail sent through the 
ungerground webmail system

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to