Sure

The only difference, I guess, LDAP users should have no "Login" permission,
so these users need to be authenticated against LDAP only by default.

OFFTOPIC current LDAP code is very messy :( we have
https://issues.apache.org/jira/browse/OPENMEETINGS-964 to reimplement it


On Mon, Jun 2, 2014 at 12:46 AM, BBS Technik <dormiti...@gmx.de> wrote:

> Hi Maxim,
>
> would your new concept influence the ldap login, or better, could ldap be
> a part of the new permission concept?
> Ldap is a needed authentication method for me and I think for a lot of
> productiv om servers.
>
> Best regards
>
> Ed
>
>
> Gesendet: Sonntag, 01. Juni 2014 um 06:15 Uhr
> Von: "Maxim Solodovnik" <solomax...@gmail.com>
> An: dev <d...@openmeetings.apache.org>, "Openmeetings user-list" <
> user@openmeetings.apache.org>
> Betreff: [DISCUSSION] ACLs in Openmeetings
>
> Hello All,
>
> Due to multiple requests and issues (please see [1], [2], [3]) I would
> like to change User object (remove status and "user level") and add
> Permissions.
>
> As I can see the permissions should be
> Admin       == access to Admin module
> Room        == enter the room
> Dashboard == access the whiteboard
> Login         == login to Om internal DB
> Soap         == use rest/soap calls
>
> for example
> current "regular" user will have all permissions except for Admin and Soap
> current "soap" user will have soap permission only
> current OAuth user will have no Login parmission
>
> The proposed system looks extendable and should cover all current needs
>
> I'm going to implement it in 3.0.3 and 3.1.0
>
> Please let me know if you have any concerns/corrections
>
> Thanks in advance
>
> [1] http://openmeetings.markmail.org/thread/43ouivw7ysq6jorq
> [2]
> https://issues.apache.org/jira/browse/OPENMEETINGS-1007[https://issues.apache.org/jira/browse/OPENMEETINGS-1007]
> [3]
> https://issues.apache.org/jira/browse/OPENMEETINGS-986[https://issues.apache.org/jira/browse/OPENMEETINGS-986]
>  --
> WBR
> Maxim aka solomax
>



-- 
WBR
Maxim aka solomax

Reply via email to