On 08/03/2018 22:05, PeeDub wrote:
I just ran across the limitation on adding to entitlements. I'm confused. Is
the intention of the entire Syncope application to manage users' ability to
change the Syncope application? Is it not to manage users' ability to do
things outside of the Syncope application?
This shoots a hole in our whole intention.
How hard is it to dynamically update the entitlements in Syncope?
Hi,
this topic has been discussed a while ago on the dev@ ML [1] and we
agreed on a new feature to implement from Syncope 2.1 [2] (next stable).
This feature is till not implemented with Syncope
Up to Syncope 2.0 (current stable), entitlements are exclusively
targeted at internal delegate administration model.
In my company experience, however, we have been implementing so far some
sort of privileges management by leveraging the existing concepts -
especially enum attributes, relationships and roles.
Summary: at the moment what you need IS indeed possible, with some
customization; next stable release will hopefully bring more, and in a
more standardized way.
...and let me repeat that contributions are always welcome ;-)
Regards.
[1]
https://lists.apache.org/thread.html/ba605687b7ed742350834a535b67bda8ab15fe56a4bb75c3dc2b98cd@%3Cdev.syncope.apache.org%3E
[2]
https://lists.apache.org/thread.html/76793efa339684c4ce2c7bce29dd1c12c505a848db64995207de8fde@%3Cdev.syncope.apache.org%3E
[3] https://syncope.apache.org/docs/reference-guide.html#entitlements
--
Francesco Chicchiriccò
Tirasa - Open Source Excellence
http://www.tirasa.net/
Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/
