Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-7900

Allow to spot User.disable with a new, dedicated UserAction

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.10.0, 1.9.12
    • Component/s: security-spi
    • Labels:
      None

      Description

      Lars Krapf, as discussed off list we lack the ability to react to User.disable(String) with the current AuthorizableAction interface, while at the same time encouraging API consumers to disable users instead of removing them.

      One use case for such a method would be deleting additional information stored with the user account such as e.g. profile data, preferences, as soon as the user gets disabled.

      Since extending AuthorizableAction would require a major bump of the exported version, I would suggest to introduce a new UserAction interface, providing that new method, in correspondance to GroupAction, which covers group specific actions. And, in an ideal world AuthorizableAction.onPasswordChange would also reside with UserAction.

      Alex Deparvu, wdyt?

        Attachments

        1. OAK-7900.patch
          25 kB
          Angela Schreiber

          Activity

            People

            • Assignee:
              angela Angela Schreiber
              Reporter:
              angela Angela Schreiber
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: