Return-Path: Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: (qmail 51324 invoked from network); 2 Jul 2009 08:32:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Jul 2009 08:32:12 -0000 Received: (qmail 7163 invoked by uid 500); 2 Jul 2009 08:32:22 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 7145 invoked by uid 500); 2 Jul 2009 08:32:22 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 7131 invoked by uid 99); 2 Jul 2009 08:32:22 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jul 2009 08:32:22 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of anchela@day.com designates 207.126.148.183 as permitted sender) Received: from [207.126.148.183] (HELO eu3sys201aog003.obsmtp.com) (207.126.148.183) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 02 Jul 2009 08:32:12 +0000 Received: from source ([209.85.198.243]) by eu3sys201aob003.postini.com ([207.126.154.11]) with SMTP ID DSNKSkxwcQ1xP8PAnQy1hR2uX1dQJGulBlMy@postini.com; Thu, 02 Jul 2009 08:31:51 UTC Received: by rv-out-0708.google.com with SMTP id b17so551967rvf.50 for ; Thu, 02 Jul 2009 01:31:45 -0700 (PDT) Received: by 10.141.3.15 with SMTP id f15mr4355746rvi.240.1246523504878; Thu, 02 Jul 2009 01:31:44 -0700 (PDT) Received: from domestus.corp.day.com (bsl-rtr.day.com [62.192.10.254]) by mx.google.com with ESMTPS id k2sm9487782rvb.12.2009.07.02.01.31.42 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 02 Jul 2009 01:31:43 -0700 (PDT) Message-ID: <4A4C707E.4000105@day.com> Date: Thu, 02 Jul 2009 10:31:58 +0200 From: Angela Schreiber User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: users@jackrabbit.apache.org Subject: Re: PrincipalManager question. References: <8EF7CC9D-B318-4351-9739-4E550DCAFCC3@tfd.co.uk> <4A4B5DB5.1030009@day.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org > I need to answer the question. > > Is userA a member of groupB either directly or indirectly. > > userA is a member of about 100 groups, the group hierarchy is several > levels deep and group membership can be discovered using Authorizable#memberOf() Authorizable#declaredMemberOf() > some of the principals are come from custom > PrincipalProvider implementations. if i'm not mistaken you can configure multiple principalproviders. if an authorizable has multiple principals (!= group membership) then Authorizable#getPrincipals() is the thing you are looking for. The principal(s) of an authorizable are retrieved from the principalmanager that in the default setup has been created using the configured providers. angela