Mailing-List: contact dev-help@syncope.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@syncope.apache.org
Date: Wed, 14 Jun 2017 16:02:00 +0000 (UTC)
From: "ASF subversion and git services (JIRA)" <jira@apache.org>
To: dev@syncope.apache.org
Message-ID: <JIRA.13064998.1492585189000.17752.1497456120109@Atlassian.JIRA>
In-Reply-To: <JIRA.13064998.1492585189000@Atlassian.JIRA>
References: <JIRA.13064998.1492585189000@Atlassian.JIRA> <JIRA.13064998.1492585189975@jira-lw-us.apache.org>
Subject: [jira] [Commented] (SYNCOPE-1067) More flexible delegated
 administration model
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Wed, 14 Jun 2017 16:02:04 -0000


    [ https://issues.apache.org/jira/browse/SYNCOPE-1067?page=3Dcom.atlassi=
an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D16=
049326#comment-16049326 ]=20

ASF subversion and git services commented on SYNCOPE-1067:
----------------------------------------------------------

Commit a2c5c100dcde30b5c4b32b644284353e22758aff in syncope's branch refs/he=
ads/2_0_X from [~fmartelli]
[ https://git-wip-us.apache.org/repos/asf?p=3Dsyncope.git;h=3Da2c5c10 ]

[SYNCOPE-1067] fix to build with Java7


> More flexible delegated administration model
> --------------------------------------------
>
>                 Key: SYNCOPE-1067
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1067
>             Project: Syncope
>          Issue Type: Improvement
>          Components: console, core
>            Reporter: Francesco Chicchiricc=C3=B2
>            Assignee: Francesco Chicchiricc=C3=B2
>             Fix For: 2.0.4, 2.1.0
>
>
> The current implementation of [delegated administration|https://syncope.a=
pache.org/docs/reference-guide.html#delegated-administration] relies on Rol=
es, where each Role associates a set of Entitlements (e.g. administrative a=
ctions) to a set of Realms (e.g. containers for Users / Groups / Any Object=
s).
> This requires, however, that the set of Users / Groups / Any Objects to a=
dminister is somehow statically defined by containment: "administrators wit=
h role R can manage users under realms /a and /b" works as long as users to=
 administer are fully contained by the Realms /a and /b; but what if the se=
t of Users that R can administer needs to be dynamically defined, say by th=
e value of a 'department' attribute?


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)