[jira] [Commented] (SLING-6219) Allow to create users with repoinit

["Carsten Ziegeler (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-6219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15627876#comment-15627876 ] 

Carsten Ziegeler commented on SLING-6219:
-----------------------------------------

I think at some point we'll have some way to handle credentials in a more secure way in general in the provisioning model, but I wouldn't wait for this with adding this feature.
Having a user pw in the model is no different from having lets say the credentials for a mail server in the model

So I think we're fine adding it as is with plain text.

We can look at a more secure way nevertheless, but again that shouldn't block us

> Allow to create users with repoinit
> -----------------------------------
>
>                 Key: SLING-6219
>                 URL: https://issues.apache.org/jira/browse/SLING-6219
>             Project: Sling
>          Issue Type: New Feature
>          Components: JCR, Repoinit
>            Reporter: Carsten Ziegeler
>             Fix For: Repoinit Parser 1.0.4, Repoinit JCR 1.0.4
>
>
> it seems it's not possible to create a user through the repoinit. 
> This would be very useful for sample apps and testing. For example, the
> slingshot sample app currently needs an admin user to create the sample
> user accounts. And therefore slingshot needs to be in the whitelist for
> admin usage - which is not a good thing
> I suggest we add:
> create user {name}
> create user {name} {password}
> delete user {name}
> If no pw is provided for create user, we create a random pw



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)