[security-dev] IDM API - Final review

I've updated the IdentityManager API based on the latest design, could everyone please take a couple of minutes to review and let me know if you spot any issues. We'll probably do a time-boxed release (Anil, could you please confirm?) shortly so that projects consuming PLIDM can start building against the API. Thanks, Shane public interface IdentityManager { void bootstrap(IdentityConfiguration configuration, IdentityStoreInvocationContextFactory contextFactory); void setIdentityStoreFactory(IdentityStoreFactory factory); // User void createUser(User user); void removeUser(User user); void updateUser(User user); User getUser(String name); // Group void createGroup(Group group); void removeGroup(Group group); Group getGroup(String groupId); Group getGroup(String groupName, Group parent); boolean isMember(IdentityType identityType, Group group); void addToGroup(IdentityType identityType, Group group); void removeFromGroup(IdentityType identityType, Group group); // Roles void createRole(Role role); void removeRole(Role role); Role getRole(String name); boolean hasRole(IdentityType identityType, Role role, Group group); void grantRole(IdentityType identityType, Role role, Group group); void revokeRole(IdentityType identityType, Role role, Group group); boolean hasApplicationRole(IdentityType identityType, Role role); void grantApplicationRole(IdentityType identityType, Role role); void revokeApplicationRole(IdentityType identityType, Role role); // Query API <T extends IdentityType> IdentityQuery<T> createQuery(); // Credential management boolean validateCredential(User user, Credential credential); void updateCredential(User user, Credential credential); // User / Role / Group enablement / expiry void setEnabled(IdentityType identityType, boolean enabled); void setExpirationDate(IdentityType identityType, Date expirationDate); IdentityType lookupIdentityByKey(String key); // Attributes void setAttribute(IdentityType identityType, Attribute<? extends Serializable> attribute); <T extends Serializable> Attribute<T> getAttribute(IdentityType identityType, String attributeName); void removeAttribute(IdentityType identityType, String attributeName); // Realm void createRealm(Realm realm); void removeRealm(Realm realm); Realm getRealm(String name); // Tier void createTier(Tier tier); void removeTier(Tier tier); Tier getTier(String id); // Context IdentityManager forRealm(Realm realm); IdentityManager forTier(Tier tier); }