Mailing-List: contact dev-help@continuum.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@continuum.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Sender: Brett Porter <brett@porterclan.net>
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1081)
Subject: Re: Assigning a default role when a new user is added to LDAP
From: Brett Porter <brett@apache.org>
In-Reply-To: <AANLkTik6pPFA4-UrW8sTY1j4McP4masRT81p9b6R4SBt@mail.gmail.com>
Date: Thu, 19 Aug 2010 14:28:14 +1000
Content-Transfer-Encoding: quoted-printable
Message-Id: <6C2F08BF-144D-4D1D-9D0D-2021B22BAD4A@apache.org>
References: <AANLkTi=1NNnefEKnkKeQKdSkJ7VOVgiW8FvZY-yU7Ugy@mail.gmail.com>
 <AANLkTik6pPFA4-UrW8sTY1j4McP4masRT81p9b6R4SBt@mail.gmail.com>
To: dev@continuum.apache.org

This isn't possible by default. You can grant the "Project User" role to =
the guest user which allows all users (including those not logged in) to =
view them.

If you didn't want it applied to the guest, it'd require changes. =
Perhaps we could have a "registered user" which acts as a set of roles =
given to all registered users in addition to their own & the ones =
allocated to the guest user.

- Brett

On 16/08/2010, at 7:33 PM, Pierre-Henri Dezanneau wrote:

> Hello,
>=20
> Do you have any thoughts on this ?
>=20
> Thanks,
>=20
> --
> Pierre-Henri
>=20
> On Fri, Aug 6, 2010 at 5:34 PM, Pierre-Henri Dezanneau <
> ph.dezanneau@gmail.com> wrote:
>=20
>> Hello,
>>=20
>> I'm currently setting up an environment with an Active Directory =
Server
>> 2003 and a Linux server running Apache Continuum 1.3.6 with Tomcat =
6.0.24.
>> I've configured the security.properties and application.xml files to
>> authenticate my users through the LDAP server hosted in the Active
>> Directory. This works perfectly. As soon as I create a new user in my =
AD,
>> this user can then connect to Apache Continuum.
>>=20
>> The problem is, by default, the user doesn't get any role and =
therefore
>> can't see the registered projects in the project list. This is an =
issue for
>> me as I want my users to see at least all the projects being under
>> continuous integration through  Continuum. Consequently, I have to =
manually
>> log in with an Administrator account to Continuum and change manually =
every
>> user account to add a role giving them the right to see all the =
projects
>> (like the role 'Continuum Group Project Developer').
>>=20
>> My question is : How can I automatically affect a default Redback =
role to a
>> new user ? If Continuum doesn't allow that, what's the best way to
>> workaround this issue and even better to develop this feature into =
Continuum
>> ?
>>=20
>> I would greatly appreciate your help on this.
>>=20
>> Thank you,
>>=20
>> --
>> Pierre.
>>=20
>>=20

--
Brett Porter
brett@apache.org
http://brettporter.wordpress.com/