Hi Dimuthu, Also, I noticed by using the registry browser, when creating a resource, >> that resource always grants read permission to the user role "everyone". And >> also every user have the user role "everyone". So does that mean, all user >> still gets to read other users' data by default? .. >> >> > This is related to lifelong question that data services guys have > "anonymous" and "everyone". Everyone is a role. And all people in the system > are in that role. This is not anonymous. >
Yeah, actually I didn't mean everyone role being anonymous or something. I mentioned, since every user has the everyone role, and if the registry gives all resources read permission to the everyone role, wouldn't that be a problem. Cheers, Anjana. > > thanks, > dimuthu > > > >> And, the initial question, so what does it really mean by passing in the >> user name to a method like "getConfigUserRegistry()"?, does two separate >> getConfigUserRegistry calls to two users in the same tenant return the same >> registry or not? .. maybe we should just ask a registry guy and see :) .. >> >> Cheers, >> Anjana. >> >> >>> >>> Regards, >>> /Nuwan >>> >>> >>>> >>>> >>>>> Thanks, >>>>> Thilina >>>>> >>>>> >>>>>> >>>>>>> Thanks, >>>>>>> Thilina >>>>>>> >>>>>>> >>>>>>> >>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Thilina >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Fri, Oct 7, 2011 at 12:54 AM, Tharindu Mathew < >>>>>>>>>> thari...@wso2.com> wrote: >>>>>>>>>> >>>>>>>>>>> For Nuwan's question, the simple answer is no. >>>>>>>>>>> >>>>>>>>>>> If you have read permissions for that user Y of user X's >>>>>>>>>>> resource, user Y can view it. >>>>>>>>>>> >>>>>>>>>>> Separate registry spaces are only present per tenant. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> On Fri, Oct 7, 2011 at 12:40 AM, Thilina Buddhika < >>>>>>>>>>> thili...@wso2.com> wrote: >>>>>>>>>>> >>>>>>>>>>>> Actually we had used governance user registry in permission >>>>>>>>>>>> update task, not config user registry. >>>>>>>>>>>> >>>>>>>>>>>> Thanks, >>>>>>>>>>>> Thilina >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> On Fri, Oct 7, 2011 at 12:11 AM, Thilina Buddhika < >>>>>>>>>>>> thili...@wso2.com> wrote: >>>>>>>>>>>> >>>>>>>>>>>>> Hi Nuwan, >>>>>>>>>>>>> >>>>>>>>>>>>> On Thu, Oct 6, 2011 at 11:48 PM, Nuwan Bandara <nu...@wso2.com >>>>>>>>>>>>> > wrote: >>>>>>>>>>>>> >>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>> >>>>>>>>>>>>>> I am aware that we have a separate isolated registry space for >>>>>>>>>>>>>> each tenant. However do we have the same for a user. >>>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Yes. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> if I want to take a user's registry and put a value, can >>>>>>>>>>>>>> another user with registry browse permission can see that value. >>>>>>>>>>>>>> >>>>>>>>>>>>>> ie. >>>>>>>>>>>>>> >>>>>>>>>>>>>> User-X and User-Y are in the same tenant = 1 >>>>>>>>>>>>>> >>>>>>>>>>>>>> login as user-X >>>>>>>>>>>>>> >>>>>>>>>>>>>> registry = getConfigUserRegistry(1); >>>>>>>>>>>>>> registry.put("repository/foo", bar); >>>>>>>>>>>>>> >>>>>>>>>>>>>> and login as user-Y >>>>>>>>>>>>>> >>>>>>>>>>>>>> registry = getConfigUserRegistry(1); >>>>>>>>>>>>>> registry.get("repository/foo") >>>>>>>>>>>>>> >>>>>>>>>>>>>> will the result be "bar" ? >>>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> You will not be allowed to access this resource. I am sure that >>>>>>>>>>>>> this permission model is working fine, because there was an issue >>>>>>>>>>>>> in the >>>>>>>>>>>>> permission update task where it had written a flag to the user >>>>>>>>>>>>> space rather >>>>>>>>>>>>> than the system space. >>>>>>>>>>>>> >>>>>>>>>>>>> Thanks, >>>>>>>>>>>>> Thilina >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> -- >>>>>>>>>>>>>> *Thanks & Regards, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Nuwan Bandara >>>>>>>>>>>>>> Senior Software Engineer >>>>>>>>>>>>>> WSO2 Inc. | http://wso2.com >>>>>>>>>>>>>> lean . enterprise . middleware >>>>>>>>>>>>>> >>>>>>>>>>>>>> http://nuwan.bandara.co >>>>>>>>>>>>>> * >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>> Carbon-dev mailing list >>>>>>>>>>>>>> Carbon-dev@wso2.org >>>>>>>>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> -- >>>>>>>>>>>>> Thilina Buddhika >>>>>>>>>>>>> Associate Technical Lead >>>>>>>>>>>>> >>>>>>>>>>>>> WSO2 Inc. ; http://wso2.com >>>>>>>>>>>>> lean . enterprise . middleware >>>>>>>>>>>>> >>>>>>>>>>>>> phone : +94 77 44 88 727 >>>>>>>>>>>>> blog : http://blog.thilinamb.com >>>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> -- >>>>>>>>>>>> Thilina Buddhika >>>>>>>>>>>> Associate Technical Lead >>>>>>>>>>>> WSO2 Inc. ; http://wso2.com >>>>>>>>>>>> lean . enterprise . middleware >>>>>>>>>>>> >>>>>>>>>>>> phone : +94 77 44 88 727 >>>>>>>>>>>> blog : http://blog.thilinamb.com >>>>>>>>>>>> >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> Carbon-dev mailing list >>>>>>>>>>>> Carbon-dev@wso2.org >>>>>>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> -- >>>>>>>>>>> Regards, >>>>>>>>>>> >>>>>>>>>>> Tharindu >>>>>>>>>>> >>>>>>>>>>> blog: http://mackiemathew.com/ >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> Carbon-dev mailing list >>>>>>>>>>> Carbon-dev@wso2.org >>>>>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> Thilina Buddhika >>>>>>>>>> Associate Technical Lead >>>>>>>>>> WSO2 Inc. ; http://wso2.com >>>>>>>>>> lean . enterprise . middleware >>>>>>>>>> >>>>>>>>>> phone : +94 77 44 88 727 >>>>>>>>>> blog : http://blog.thilinamb.com >>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> Carbon-dev mailing list >>>>>>>>>> Carbon-dev@wso2.org >>>>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>>>> >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> *Thanks & Regards, >>>>>>>>> >>>>>>>>> Nuwan Bandara >>>>>>>>> Senior Software Engineer >>>>>>>>> WSO2 Inc. | http://wso2.com >>>>>>>>> lean . enterprise . middleware >>>>>>>>> >>>>>>>>> http://nuwan.bandara.co >>>>>>>>> * >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> Carbon-dev mailing list >>>>>>>>> Carbon-dev@wso2.org >>>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>>> >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> Regards, >>>>>>>> >>>>>>>> Tharindu >>>>>>>> >>>>>>>> blog: http://mackiemathew.com/ >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> Carbon-dev mailing list >>>>>>>> Carbon-dev@wso2.org >>>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> Thilina Buddhika >>>>>>> Associate Technical Lead >>>>>>> WSO2 Inc. ; http://wso2.com >>>>>>> lean . enterprise . middleware >>>>>>> >>>>>>> phone : +94 77 44 88 727 >>>>>>> blog : http://blog.thilinamb.com >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Carbon-dev mailing list >>>>>>> Carbon-dev@wso2.org >>>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>>> >>>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> Regards, >>>>>> >>>>>> Tharindu >>>>>> >>>>>> blog: http://mackiemathew.com/ >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> Carbon-dev mailing list >>>>>> Carbon-dev@wso2.org >>>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>>> >>>>>> >>>>> >>>>> >>>>> -- >>>>> Thilina Buddhika >>>>> Associate Technical Lead >>>>> WSO2 Inc. ; http://wso2.com >>>>> lean . enterprise . middleware >>>>> >>>>> phone : +94 77 44 88 727 >>>>> blog : http://blog.thilinamb.com >>>>> >>>>> _______________________________________________ >>>>> Carbon-dev mailing list >>>>> Carbon-dev@wso2.org >>>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>>> >>>>> >>>> >>>> >>>> -- >>>> Regards, >>>> >>>> Tharindu >>>> >>>> blog: http://mackiemathew.com/ >>>> >>>> >>>> _______________________________________________ >>>> Carbon-dev mailing list >>>> Carbon-dev@wso2.org >>>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>>> >>>> >>> >>> >>> -- >>> *Thanks & Regards, >>> >>> Nuwan Bandara >>> Senior Software Engineer >>> WSO2 Inc. | http://wso2.com >>> lean . enterprise . middleware >>> >>> http://nuwan.bandara.co >>> * >>> >>> >>> _______________________________________________ >>> Carbon-dev mailing list >>> Carbon-dev@wso2.org >>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >>> >>> >> >> >> -- >> *Anjana Fernando* >> >> Senior Software Engineer >> WSO2 Inc. | http://wso2.com >> lean . enterprise . middleware >> >> _______________________________________________ >> Carbon-dev mailing list >> Carbon-dev@wso2.org >> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >> >> > > _______________________________________________ > Carbon-dev mailing list > Carbon-dev@wso2.org > http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev > > -- *Anjana Fernando* Senior Software Engineer WSO2 Inc. | http://wso2.com lean . enterprise . middleware
_______________________________________________ Carbon-dev mailing list Carbon-dev@wso2.org http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev