Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
Received-SPF: pass (athena.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <13529820.post@talk.nabble.com>
Date: Thu, 1 Nov 2007 07:34:11 -0700 (PDT)
From: prasana <prasannap@bluenog.com>
To: jetspeed-dev@portals.apache.org
Subject: Re: [jira] Commented: (JS2-21) Missing Security Feature: Check
 roles assigned to any group to user belongs
In-Reply-To: <CA09FA9F-4121-4278-8CF0-93B39F2B72A1@bluesunrise.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
References: <9919404.1193845371235.JavaMail.jira@brutus>
 <CA09FA9F-4121-4278-8CF0-93B39F2B72A1@bluesunrise.com>


Thanks for the reply.

I looked at those methods.

In my custom SecurityMappingHandler, for retrieving roles based on group
assigned to user, in the method of getRolePrincipals(String username), I am
getting all the groups for the user getGroupPrincipals(String username) and
for each group I am calling getRolesInGroup(String groupFullPathName)

The only issue that I am seeing currently is Roles that are mapped to Groups
assigned to user start showing up in User Detail Information Portlet
Ideally, there should not be a delete check box for these Roles as they are
not mapped directly to User. They are mapped to Groups that the user belongs
to.

When I tried to delete those Roles in User Detail Information Portlet, its
giving an error saying "The user 'user_name' does not exist. "

Thanks
Prasanna


David Sean Taylor wrote:
> 
> 
> On Oct 31, 2007, at 8:42 AM, Prasanna (JIRA) wrote:
> 
>>
>>     [ https://issues.apache.org/jira/browse/JS2-21? 
>> page=com.atlassian.jira.plugin.system.issuetabpanels:comment- 
>> tabpanel#action_12539103 ]
>>
>> Prasanna commented on JS2-21:
>> -----------------------------
>>
>> We need this feature of retrieving the roles based on the group  
>> assigned to user.
> Just FYI
> 
> There is the Group Manager API:
> 
>    Collection getGroupsInRole(String roleFullPathName) throws  
> SecurityException;
> 
> and RoleManager:
> 
>      Collection getRolesInGroup(String groupFullPathName) throws  
> SecurityException;
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/-jira--Commented%3A-%28JS2-21%29-Missing-Security-Feature%3A-Check-roles-assigned-to-any-group-to-user-belongs-tf4725912.html#a13529820
Sent from the Jetspeed - Dev mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org