10:01 a.m.
Keeping in mind that a user could represent either a human or non-human
agent is it really correct to assume that all users have a first name, a
last name and an e-mail address?
Even for human users whilst it is likely they would have all three of
these does it make sense to assume they always will? I am just thinking
could it make more sense to maybe have an 'Account' interface above
'User' to allow for accounts that have no relationship to humans?
Regards,
Darran Lofthouse.
5:36 p.m.
I did propose something like this earlier on, by introducing an "Agent"
class in between IdentityType and User:
IdentityType -> Agent -> User
however the general consensus was that this overcomplicated things.
On 12/02/2012 02:01 AM, Darran Lofthouse wrote:
Keeping in mind that a user could represent either a human or
non-human
agent is it really correct to assume that all users have a first name, a
last name and an e-mail address?
Even for human users whilst it is likely they would have all three of
these does it make sense to assume they always will? I am just thinking
could it make more sense to maybe have an 'Account' interface above
'User' to allow for accounts that have no relationship to humans?
Regards,
Darran Lofthouse.
_______________________________________________
security-dev mailing list
security-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/security-dev
3:08 a.m.
On 12/02/2012 11:36 PM, Shane Bryzak wrote:
I did propose something like this earlier on, by introducing an
"Agent"
class in between IdentityType and User:
IdentityType -> Agent -> User
however the general consensus was that this overcomplicated things.
One place that users would be exposed to this is if PicketLink backs the
access to the management interfaces in AS7 they would need to know to
avoid populating those fields or to populate them with dummy data if
defining an account for another host controller.
On 12/02/2012 02:01 AM, Darran Lofthouse wrote:
> Keeping in mind that a user could represent either a human or non-human
> agent is it really correct to assume that all users have a first name, a
> last name and an e-mail address?
>
> Even for human users whilst it is likely they would have all three of
> these does it make sense to assume they always will? I am just thinking
> could it make more sense to maybe have an 'Account' interface above
> 'User' to allow for accounts that have no relationship to humans?
>
> Regards,
> Darran Lofthouse.
> _______________________________________________
> security-dev mailing list
> security-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/security-dev
_______________________________________________
security-dev mailing list
security-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/security-dev
7:13 p.m.
On 12/03/2012 07:08 PM, Darran Lofthouse wrote:
On 12/02/2012 11:36 PM, Shane Bryzak wrote:
> I did propose something like this earlier on, by introducing an "Agent"
> class in between IdentityType and User:
>
> IdentityType -> Agent -> User
>
> however the general consensus was that this overcomplicated things.
One place that users would be exposed to this is if PicketLink backs the
access to the management interfaces in AS7 they would need to know to
avoid populating those fields or to populate them with dummy data if
defining an account for another host controller.
That's a valid use case, and one that I can envision becoming more and
more common. If no-one has any objections then I'll add the
implementation for this back in tomorrow.
> On 12/02/2012 02:01 AM, Darran Lofthouse wrote:
>> Keeping in mind that a user could represent either a human or non-human
>> agent is it really correct to assume that all users have a first name, a
>> last name and an e-mail address?
>>
>> Even for human users whilst it is likely they would have all three of
>> these does it make sense to assume they always will? I am just thinking
>> could it make more sense to maybe have an 'Account' interface above
>> 'User' to allow for accounts that have no relationship to humans?
>>
>> Regards,
>> Darran Lofthouse.
>> _______________________________________________
>> security-dev mailing list
>> security-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/security-dev
> _______________________________________________
> security-dev mailing list
> security-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/security-dev
>
_______________________________________________
security-dev mailing list
security-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/security-dev
4375
days inactive
4379
days old
3 comments
2 participants
participants (2)
-
Darran Lofthouse -
Shane Bryzak