Following on from my questions about users, here are some questions about roles...
1) Should there be a ROLE_LIST entitlement added by default? RoleController.list() currently has no authorization so anyone can list the roles. Should there also be a RoleController.count() method with the same entitlement as per the UserController? 2) Is it possible to search for a role? I couldn't find any functionality to do this. 3) RoleController.delete() does not return the deleted RoleTO object, unlike the corresponding method in UserController. It also uses the HTTP delete verb instead of get as per the UserController. I suggest there should be consistent behaviour for delete across the controllers. 4) From the wiki - "currently roles cannot be propagated". Is this just for virtual attributes or for any attributes? Are there any plans to support this? Thanks! Colm. -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
