You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "angela (JIRA)" <ji...@apache.org> on 2015/03/26 12:21:52 UTC

[jira] [Created] (OAK-2687) Introduce Dynamic Groups

angela created OAK-2687:
---------------------------

             Summary: Introduce Dynamic Groups
                 Key: OAK-2687
                 URL: https://issues.apache.org/jira/browse/OAK-2687
             Project: Jackrabbit Oak
          Issue Type: New Feature
          Components: core, jcr
            Reporter: angela
             Fix For: 1.4


we may consider extending the jackrabbit user management API by the concept of dynamic groups that would have the following characteristics:

- the group in the repository is just a marker
- the group members are not stored with the group and are not revealed by regular membership operations such as 'getMembers', 'getDeclaredMembers', 'memberOf', 'declaredMemberOf'
- the dynamic group membership is only evaluated upon authentication (e.g. in the principal provider implementation) based on implementation details both in the principal provider and the login module.

one example to illustrate the concept of the dynamic groups is the 'Everyone' principal where every principal of the default principal management implementation is member of. for consistency, this group principal already requires special treatment in the user management implementation in case there exists an 'everyone' group (match by principal name only).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)