Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Message-ID: <29773314.1145881806070.JavaMail.jira@brutus>
Date: Mon, 24 Apr 2006 12:30:06 +0000 (GMT+00:00)
From: "Emmanuel Lecharny (JIRA)" <jira@apache.org>
To: dev@directory.apache.org
Subject: [jira] Commented: (DIRSERVER-606) ou=users, ou=system - user cannot
 see their own entry
In-Reply-To: <1942518626.1144099366669.JavaMail.jira@ajax>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

    [ http://issues.apache.org/jira/browse/DIRSERVER-606?page=3Dcomments#ac=
tion_12376017 ]=20

Emmanuel Lecharny commented on DIRSERVER-606:
---------------------------------------------

regarding your proposal :

a) Yeah, we can do that. This is for RC2, and its better to have something =
that works, even if you can read your password, than something that is badl=
y broken.

a-2) I agree with "minimal built-in rules". I used legacy, because it was s=
omething which will be removed soon. I don't know when, may be in 1.1 or in=
 1.0

b) Yes, we have to update the doc.  Feel free to ask Alex about the intrica=
cy of ACI usage with the newer AuthorizationService. As he wrote the code, =
he is the one who know it the best. We sure need this doco if we want users=
 not to be puzzled as we are...

Password things : I'm not very confortable with it. I don't like the fact f=
or instance that I can read my passwords in Firefox. The problem is if you =
can do that, then you will have to be parano=C3=AFd  : each time you go to =
have a copy, lock  your computer... I don't see any occasion where clear pa=
ssword need to be shown to the user, even if the files that contains the en=
tries is not crypted (eh eh, another improvment ...). Well, this is another=
 problem, and we can fill a JIRA for that, too :)

> ou=3Dusers, ou=3Dsystem - user cannot see their own entry
> -----------------------------------------------------
>
>          Key: DIRSERVER-606
>          URL: http://issues.apache.org/jira/browse/DIRSERVER-606
>      Project: Directory ApacheDS
>         Type: Bug

>     Versions: 1.0-RC1
>  Environment: JDK 1.4.1
> Tried both JXplorer, and from ACEGI security
>     Reporter: Marc Batchelor
>     Assignee: Stefan Zoerner
>     Priority: Critical
>  Attachments: patch.txt, patch_DIRSERVER-606_2.txt
>
> User binds to ApacheDS as a user under ou=3Dusers, ou=3Dsystem. The user =
cannot see their own entry to get their own attributes.
> Documentation states: Users cannot see other user entries under the 'ou=
=3Dusers,ou=3Dsystem' entry.
> Agreed and understood. But, the user, after binding with the directory, c=
annot even find their own entry to get their own attributes.=20

--=20
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira