Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 10804 invoked from network); 7 Oct 2005 05:32:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 7 Oct 2005 05:32:30 -0000 Received: (qmail 87735 invoked by uid 500); 7 Oct 2005 05:32:29 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 87537 invoked by uid 500); 7 Oct 2005 05:32:28 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 87526 invoked by uid 99); 7 Oct 2005 05:32:28 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 06 Oct 2005 22:32:28 -0700 X-ASF-Spam-Status: No, hits=1.9 required=10.0 tests=DNS_FROM_RFC_POST,FROM_ENDS_IN_NUMS,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of aok123@bellsouth.net designates 205.152.59.73 as permitted sender) Received: from [205.152.59.73] (HELO imf25aec.mail.bellsouth.net) (205.152.59.73) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 06 Oct 2005 22:32:31 -0700 Received: from ibm69aec.bellsouth.net ([65.80.200.112]) by imf25aec.mail.bellsouth.net with ESMTP id <20051007053206.QSEH1975.imf25aec.mail.bellsouth.net@ibm69aec.bellsouth.net> for ; Fri, 7 Oct 2005 01:32:06 -0400 Received: from [172.16.1.152] (really [65.80.200.112]) by ibm69aec.bellsouth.net with ESMTP id <20051007053205.LNFW9927.ibm69aec.bellsouth.net@[172.16.1.152]> for ; Fri, 7 Oct 2005 01:32:05 -0400 Message-ID: <43460852.4030807@bellsouth.net> Date: Fri, 07 Oct 2005 01:32:02 -0400 From: Alex Karasulu User-Agent: Mozilla Thunderbird 1.0.7 (Macintosh/20050923) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Apache Directory Developers List Subject: Re: svn commit: r307017 - in /directory/apacheds/trunk: core/src/main/java/org/apache/ldap/server/configuration/ main/src/main/java/org/apache/ldap/server/configuration/ References: <20051007045922.1333.qmail@minotaur.apache.org> <768dcb2e0510062205r4a715f4bm@mail.gmail.com> In-Reply-To: <768dcb2e0510062205r4a715f4bm@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Trustin Lee wrote: > Do we need accessControlEnabled property here? Can user just insert > or remove AuthorizationService? That's more of a configuration pain. Adding and removing the Authz service can cause more errors and user needs to remember package/class name etc. This way users can toggle true/false property to control one or more authz services. Plus as touched on above one or more Authz service may be in use. We may have in one service for rule-based-access-control and another for basic-access-control etc. Alex