portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From prasana <prasan...@bluenog.com>
Subject Re: [jira] Commented: (JS2-21) Missing Security Feature: Check roles assigned to any group to user belongs
Date Thu, 01 Nov 2007 14:34:11 GMT

Thanks for the reply.

I looked at those methods.

In my custom SecurityMappingHandler, for retrieving roles based on group
assigned to user, in the method of getRolePrincipals(String username), I am
getting all the groups for the user getGroupPrincipals(String username) and
for each group I am calling getRolesInGroup(String groupFullPathName)

The only issue that I am seeing currently is Roles that are mapped to Groups
assigned to user start showing up in User Detail Information Portlet
Ideally, there should not be a delete check box for these Roles as they are
not mapped directly to User. They are mapped to Groups that the user belongs
to.

When I tried to delete those Roles in User Detail Information Portlet, its
giving an error saying "The user 'user_name' does not exist. "

Thanks
Prasanna



David Sean Taylor wrote:
> 
> 
> On Oct 31, 2007, at 8:42 AM, Prasanna (JIRA) wrote:
> 
>>
>>     [ https://issues.apache.org/jira/browse/JS2-21? 
>> page=com.atlassian.jira.plugin.system.issuetabpanels:comment- 
>> tabpanel#action_12539103 ]
>>
>> Prasanna commented on JS2-21:
>> -----------------------------
>>
>> We need this feature of retrieving the roles based on the group  
>> assigned to user.
> Just FYI
> 
> There is the Group Manager API:
> 
>    Collection getGroupsInRole(String roleFullPathName) throws  
> SecurityException;
> 
> and RoleManager:
> 
>      Collection getRolesInGroup(String groupFullPathName) throws  
> SecurityException;
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/-jira--Commented%3A-%28JS2-21%29-Missing-Security-Feature%3A-Check-roles-assigned-to-any-group-to-user-belongs-tf4725912.html#a13529820
Sent from the Jetspeed - Dev mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message