svn commit: r1007373 - in /websites/staging/sling/trunk/content: ./ documentation/the-sling-engine/service-authentication.html

[bu...@apache.org]

Author: buildbot
Date: Mon Feb 27 14:57:45 2017
New Revision: 1007373

Log:
Staging update by buildbot for sling

Modified:
    websites/staging/sling/trunk/content/   (props changed)
    websites/staging/sling/trunk/content/documentation/the-sling-engine/service-authentication.html

Propchange: websites/staging/sling/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon Feb 27 14:57:45 2017
@@ -1 +1 @@
-1784573
+1784576

Modified: websites/staging/sling/trunk/content/documentation/the-sling-engine/service-authentication.html
==============================================================================
--- websites/staging/sling/trunk/content/documentation/the-sling-engine/service-authentication.html (original)
+++ websites/staging/sling/trunk/content/documentation/the-sling-engine/service-authentication.html Mon Feb 27 14:57:45 2017
@@ -128,6 +128,10 @@ h2:hover > .headerlink, h3:hover > .head
 <li><a href="#slingrepository">SlingRepository</a></li>
 </ul>
 </li>
+<li><a href="#configuration">Configuration</a><ul>
+<li><a href="#service-user-mappings">Service User Mappings</a></li>
+</ul>
+</li>
 <li><a href="#deprecation-of-administrative-authentication">Deprecation of administrative authentication</a></li>
 </ul>
 </div>
@@ -211,6 +215,7 @@ such that system administrators are in f
 </pre></div>
 </td></tr></table>
 
+<p>In addition a service named <code>ServiceUserMapped</code> is registered for each bundle and subservice name for which a service user mapping is configured (<a href="https://issues.apache.org/jira/browse/SLING-4312">SLING-4312</a>). By explicitly defining a (static) reference towards <code>ServiceUserMapped</code> one can defer starting the service until that service user mapping is available.</p>
 <h3 id="resourceresolverfactory"><code>ResourceResolverFactory</code><a class="headerlink" href="#resourceresolverfactory" title="Permanent link">&para;</a></h3>
 <p>The second part is support for service access to the Resource Tree. To this
 avail, the <code>ResourceResolverFactory</code> service is enhanced with a new factory
@@ -243,6 +248,15 @@ to support JCR Repository access for ser
 service bundle is the bundle actually using the <code>SlingRepository</code>
 service. The additional Subservice Name may be provided with the
 <code>subServiceName</code> parameter.</p>
+<h2 id="configuration">Configuration<a class="headerlink" href="#configuration" title="Permanent link">&para;</a></h2>
+<h3 id="service-user-mappings">Service User Mappings<a class="headerlink" href="#service-user-mappings" title="Permanent link">&para;</a></h3>
+<p>For each service/subservice name combination an according mapping needs to be provided. The mapping binds a service name/subservice name to a JCR system user.
+This is configured through an OSGi configuration for the factory configuration with PID <code>org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl.amended</code> <a href="https://issues.apache.org/jira/browse/SLING-3578">SLING-3578</a>. There you can set one configuration property named <code>user.mapping</code> getting a String array as value where each entry must stick to the following format:</p>
+<div class="codehilite"><pre><span class="o">&lt;</span><span class="n">service</span><span class="o">-</span><span class="n">name</span><span class="o">&gt;</span><span class="p">[:</span><span class="o">&lt;</span><span class="n">subservice</span><span class="o">-</span><span class="n">name</span><span class="o">&gt;</span><span class="p">]=</span><span class="o">&lt;</span><span class="n">authorizable</span> <span class="n">id</span> <span class="n">of</span> <span class="n">a</span> <span class="n">JCR</span> <span class="n">system</span> <span class="n">user</span><span class="o">&gt;</span><span class="p">]</span>
+</pre></div>
+
+
+<p>The according user must exist at the point in time where <code>ResourceResolverFactory.getServiceResourceResolver(...)</code> or <code>SlingRepository.loginService(...)</code> is called.</p>
 <h2 id="deprecation-of-administrative-authentication">Deprecation of administrative authentication<a class="headerlink" href="#deprecation-of-administrative-authentication" title="Permanent link">&para;</a></h2>
 <p>Originally the <code>ResourceResolverFactory.getAdministrativeResourceResolver</code>
 and <code>SlingRepository.loginAdministrative</code> methods have been defined to
@@ -262,7 +276,7 @@ support for these methods: If the method
 is always thrown from these methods. The JavaDoc of the methods is
 extended with this information.</p>
       <div class="timestamp" style="margin-top: 30px; font-size: 80%; text-align: right;">
-        Rev. 1562473 by cziegeler on Wed, 29 Jan 2014 15:13:34 +0000
+        Rev. 1784576 by kwin on Mon, 27 Feb 2017 14:57:36 +0000
       </div>
       <div class="trademarkFooter"> 
         Apache Sling, Sling, Apache, the Apache feather logo, and the Apache Sling project