Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-5355

Create service users and ACLs from the provisioning model

    XMLWordPrintableJSON

Details

    Description

      As discussed in the "Removing loginAdministrative, how to test that, and service username conventions" thread on our dev list [1] we need to be able to create service users and set the corresponding ACLs from our provisioning model.

      This should be implemented using distinct utility classes, one for the users and one for the ACLs, that take simple mini-languages as input. This will allow for reusing these utilities in test code for example.

      [1] http://markmail.org/message/kcvuhwfdald2dyuz

      Edit: high-level requirements

      As discussed in the "SLING-5355 - configs vs. content for ACLs and service users" thread - http://markmail.org/message/tzno2via2wjckhuc

      • HR1 - Create service users and set their ACLs as defined in the Sling instance's provisioning model.
      • HR2 - Create initial paths like /var/discovery, so that ACLs can be set on them.
      • HR3 - Make the full text of the ACL definitions available at runtime for auditing purposes (see Michael Marth's Dec.17 comment in SLING-5355). Also useful for upgrades where merging with conflict detection is needed.

      Attachments

        Issue Links

          blocks

          Sub-task - The sub-task of the issue SLING-5252 Remove getAdministrativeResourceResolver() from Scripting Core

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue SLING-5253 Remove getAdministrativeResourceResolver() from the Sightly engine

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue SLING-5254 Remove getAdministrativeResourceResolver() from the Sightly JS Provider

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5238 Remove getAdministrativeResourceResolver() usage from org.apache.sling.resource.inventory

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5226 Remove loginAdministrative() usage from org.apache.sling.servlets.post

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5229 Remove getAdministrativeResourceResolver() and loginAdministrative() usage from JCR components

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5227 Remove loginAdministrative() usage from org.apache.sling.bgservlets

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5228 Remove loginAdministrative() usage from org.apache.sling.installer.provider.jcr

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5230 Remove getAdministrativeResourceResolver() usage from org.apache.sling.event.dea

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5231 Remove getAdministrativeResourceResolver() usage from Discovery components

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5232 Remove loginAdministrative() usage from org.apache.sling.event

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5233 Remove getAdministrativeResourceResolver() usage from org.apache.sling.i18n

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5234 Remove getAdministrativeResourceResolver() usage from org.apache.sling.xss

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5235 Remove loginAdministrative() usage from org.apache.sling.resourceresolver

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5236 Remove getAdministrativeResourceResolver() usage from scripting bundles

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5237 Remove getAdministrativeResourceResolver() usage from org.apache.sling.servlets.resolver

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5239 Remove loginAdministrative() usage from org.apache.sling.rewriter

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5240 Remove getAdministrativeResourceResolver() usage from org.apache.sling.tenant

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-6562 Remove getAdministrativeResourceResolver from Sling Validation

          • Major - Major loss of function.
          • Closed
          is blocked by

          New Feature - A new feature of the product, which has yet to be developed. SLING-5414 Make the contents of the provisioning model available at runtime

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-5449 Content repository initialization language

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. SLING-5135 Whitelist legit usages of loginAdministrative and administrative ResourceResolver

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. JCRVLT-61 Allow AccessControllHandling be defined per filter root

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. SLING-6990 Content Package Installer: Use service resource resolvers instead of admin resource resolver

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SLING-9422 Content Package Installer: Use service resource resolvers instead of admin resource resolver for installation

          • Major - Major loss of function.
          • Closed

          Activity

            People

              bdelacretaz Bertrand Delacretaz
              bdelacretaz Bertrand Delacretaz
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: