Re: [security-dev] PicketLink 3 IDM - Information Contained Within a User
On 12/02/2012 11:36 PM, Shane Bryzak wrote:
I did propose something like this earlier on, by introducing an
"Agent"
class in between IdentityType and User:
IdentityType -> Agent -> User
however the general consensus was that this overcomplicated things.
One place that users would be exposed to this is if PicketLink backs the
access to the management interfaces in AS7 they would need to know to
avoid populating those fields or to populate them with dummy data if
defining an account for another host controller.
On 12/02/2012 02:01 AM, Darran Lofthouse wrote:
> Keeping in mind that a user could represent either a human or non-human
> agent is it really correct to assume that all users have a first name, a
> last name and an e-mail address?
>
> Even for human users whilst it is likely they would have all three of
> these does it make sense to assume they always will? I am just thinking
> could it make more sense to maybe have an 'Account' interface above
> 'User' to allow for accounts that have no relationship to humans?
>
> Regards,
> Darran Lofthouse.
> _______________________________________________
> security-dev mailing list
> security-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/security-dev
_______________________________________________
security-dev mailing list
security-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/security-dev