Editor for editing ACIs

• Key: DIRSTUDIO-12
• Type: New Feature
• Status: Closed
• Resolution: Incomplete
• Priority: Minor
• Assignee: Unassigned
• Reporter: Stefan Seelmann
• Component/s: studio-acieditor
• Fix Version/s: 0.8.0

Description

It would be nice to have an eclipse editor with syntax highligthing for ACIs.
Here is the grammar: http://docs.safehaus.org/display/APACHEDS/ABNF+syntax+for+LDAP+ACIItem
Requested by Ersin Er.

Comments

[Emmanuel Lecharny]

Yeah, this is something we really badly need. I raise to JIRA to Task.

[Ersin Er]

Here are some references for the ACI Item syntax:

- http://docs.safehaus.org/display/APACHEDS/ABNF+syntax+for+LDAP+ACIItem
- http://people.apache.org/~ersiner/apachecon-us06/ac-us-06-FR20-ErsinEr-ApacheDS_Access_Control_Administration_The_X.500_Way.pdf
- The ACIItem Antlr Parser & Tests (which are not many)

Changing fix version to 0.7.0.

[Pierre-Arnaud Marcelot]

The editor is almost done.

It should be ready for 0.8.0.

[Stefan Seelmann]

The visual editor is almost done. There are widgets for User Permissions, Protected Items and Grants and Denials. Further there are editor dialogs for the most detail fields, except the subtree specification and the refinement are missing (that are the most complex ones)

The source editor has syntax highlighting, content assistent and a code formatter.

The current status of the ACI Item Editor could be found here: http://cwiki.apache.org/confluence/display/DIRxSTUDIO/ACI+Editor+Plugin+Developer+Discussion

[Ersin Er]

FYI, we updated the ACI syntax in 1.5 (not in 1.0) to allow regular LDAP Filters instead of Refinements where possible. Refinements are still valid but can just be replaced by LDAP Filters.

[Stefan Seelmann]

Yes thanks, I remember. Is this also true for the specificationFilter of the Subtree User Class?

[Ersin Er]

It does not apply to subtree user class, because that class does not even allow using refinements. It only allows base and specific exclusions.

The new scheme only applies to subtreeSpecification attribute of subentries.

[Ersin Er]

... and there is only one refinement thing in ACIItem grammar and it has nothing to do with subtreeSpecifications. As I said the subtree user class has neither refinement nor ldap filter component. The refinement specification in the ACIItem grammar is for specifying a restricted set of objects.

[Stefan Seelmann]

Closing this issue because we have implemented the main functionality to edit an ACI item.
The refinement editor is still missing, we will do this later in DIRSTUDIO-81.
Feel free to create new issues for bugs reports or improvments.

[Pierre-Arnaud Marcelot]

Closed.