First, I truncated the message, otherwise we produce some confusion  
(who said what)

1) no JAXB, XStream will do the job

2) hierarchy is a very "cheap" feature. No geoserver code beyond the  
one I produce now will be concerned. I will flatten the hierarchy  
before you see it :-)

3) Two or one file. I see user/group management as a global enterprise  
issue (active directory as an example), roles and role associations  
are application specific. Its a common situation to fetch user/groups  
from a third party backend store, but having role associations in a  
local file. These two stores are loosely coupled, not every user/group  
in the enterprise needs roles for geoserver. I still like the idea of  
two files, but I can make make a third xml schema which is an  
aggregate of roles.xsd and users.xsd and store user/group/roles in one  
xml file. As a consequence, changing the user/group store gets more  
complicated.

Proposal: I will continue with two files till we can see the code in  
action. If the community dislikes the two file approach, I will merge.  
This is easier than splitting.

4)
<gsv:userroles username="user1">ROLE_WFS ROLE_WMS</gsv:userroles>
This is semantically not the same because no check is made by the  
validator if the roles exist. We could use an attribute of type  
ID_REFS having

<gsv:userroles username="user1"  roles="ROLE_WFS ROLE_WMS"/>. This  
would work for
user/roles, group/roles and group/user relationships. I only fear ,  
that for long lists, esp. group/users, the config file  becomes  
difficult to read. Better a document with many  lines as a document  
with long lines.

A also think we should not exaggerate the simplification.

Cheers
Christian




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.



------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to