Skip to content

Conversation

@tulinkry
Copy link
Contributor

@tulinkry tulinkry commented Apr 10, 2017

This expects the #1525 to be merged as it already implements the new interface.

This change provides two simple plugins to statically enforce some authorization for groups or projects.

Both performing authorization for groups (or projects) based on statically initialized set of groups (projects) which are allowed. The initialization can be one of

  • a single string instance
  • a string array (the example bellow)
  • a list of strings

Example:
(note the <string>1</string> is real group name in my setup)

<object class="org.opensolaris.opengrok.authorization.AuthorizationPlugin"> <void property="name"> <string>org.opensolaris.opengrok.authorization.plugins.GroupPlugin</string> </void> <void property="role"> <string>SUFFICIENT</string> </void> <void property="setup"> <void method="put"> <string>groups</string> <array class="java.lang.String" length="2"> <void index="0"> <string>1</string> </void> <void index="1"> <string>2</string> </void> </array> </void> </void> </object

There are also the changes for #1525 which I'll merge manually after the PR gets merged

@tulinkry tulinkry self-assigned this Apr 10, 2017
@tulinkry tulinkry changed the title Auth stacks plugins Two plugin classes implemented in OpenGrok - groups and projects restrictions Apr 10, 2017
@tulinkry tulinkry force-pushed the auth-stacks-plugins branch from 0f16fa2 to 240ab09 Compare April 11, 2017 10:02
@tulinkry
Copy link
Contributor Author

A good idea could be to use also a blacklist, not only the whitelist

@tulinkry
Copy link
Contributor Author

tulinkry commented May 4, 2017

With the new addition in #1560 this PR is quite meaningless

@tulinkry tulinkry closed this May 4, 2017
@tulinkry tulinkry deleted the auth-stacks-plugins branch June 21, 2019 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment