[OAK-9462] Extensible DynamicMembershipProvider

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.42.0
• Component/s: auth-external, core, security-spi
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 15/Jun/21 07:31
• Updated: 14/Jun/22 12:20
• Resolved: 25/Jun/21 06:42

Description

Today the only built-in dynamic org.apache.jackrabbit.api.security.user.Group is the one associated with the everyone principal that automatically has every other group and user as member.
In order to allow for additional flexibility we should consider introducing a DynamicMembershipProvider interface. while by default a single implementation for the everyone group would be present as today, it would allow to provide additional implementations. e.g. for those groups configured with the automembership option defined with DefaultSyncConfig, when additionally dynamicmembership is enabled.

Issue Links

• supercedes: OAK-2687 Introduce Dynamic Groups
• links to: GitHub Pull Request #300

Sub-Tasks

• Move AutoMembershipPrincipals from ExternalGroupPrincipalProvider to top level: Closed
• Document DynamicMembershipProvider: Closed