Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 96018 invoked from network); 29 Sep 2005 02:58:59 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 29 Sep 2005 02:58:59 -0000 Received: (qmail 62624 invoked by uid 500); 29 Sep 2005 02:58:58 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 62574 invoked by uid 500); 29 Sep 2005 02:58:58 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 62560 invoked by uid 99); 29 Sep 2005 02:58:58 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Sep 2005 19:58:58 -0700 X-ASF-Spam-Status: No, hits=1.9 required=10.0 tests=DNS_FROM_RFC_POST,FROM_ENDS_IN_NUMS,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of aok123@bellsouth.net designates 205.152.59.67 as permitted sender) Received: from [205.152.59.67] (HELO imf19aec.mail.bellsouth.net) (205.152.59.67) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Sep 2005 19:59:03 -0700 Received: from ibm60aec.bellsouth.net ([65.80.200.112]) by imf19aec.mail.bellsouth.net with ESMTP id <20050929025836.KZTU3197.imf19aec.mail.bellsouth.net@ibm60aec.bellsouth.net> for ; Wed, 28 Sep 2005 22:58:36 -0400 Received: from [172.16.1.152] (really [65.80.200.112]) by ibm60aec.bellsouth.net with ESMTP id <20050929025831.GUUS19429.ibm60aec.bellsouth.net@[172.16.1.152]> for ; Wed, 28 Sep 2005 22:58:31 -0400 Message-ID: <433B5856.3090308@bellsouth.net> Date: Wed, 28 Sep 2005 22:58:30 -0400 From: Alex Karasulu User-Agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: dev@directory.apache.org Subject: [ApacheDS][ACDFEngine] How to handle multiple or no userGroups? Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Trustin, A user could be in multiple userGroups or none at all. I have two questions: 1). Can we just pass null to the ACDFEngine's checkPermission() method when the user is not in a group? 2). If the user is in multiple groups how do we determine if the user should be granted/denied access? Alex