Re: [stellation-res] Checkin of new version of core and unittests.

["Mark C. Chu-Carroll" <mcc@xxxxxxxxxxxxxx>]

On Sat, 2002-11-09 at 14:59, Dave Shields wrote:
> On Fri, Nov 08, 2002 at 08:40:40PM -0500, Mark C. Chu-Carroll wrote:
> > 
> > I've checked in new version of the core and unittest
> > components.
> > 
> > The big change here is that the core now includes support
> > for access control. There is no command-line support for
> > access control lists, but they are fully implemented inside
> > of the repository. 
> 
> I guess I should get cracking on adding command-line support, unless
> you want to do it. Is the curent implementation faithful to the spec 
> "Access Control in Stellation" of 5 September?

Very close, but not entirely. There are a lot of examples of the syntax 
that the system understands for ACLs in the unittest project, in the
file "AccessControlListPrivChecks.txt". There is code for parsing ACLs
and in the ACL classes in the repos.accesscontrol package.


> Is the slash used to separate grants needed? Why not just make each
> grant an argument to 'svc grant', writing
> 
>   svc grant mcc:/checkout,fork shields:checkin,checkout
> 
> instead of syntax suggested in spec
> 
>   svc grant mcc:/checkout,fork/shields:checkin,checkout


The main reason is because there's already code for inputting and
outputting ACLs, and it's in the slash separated format. Also, I think
it's going to be easier to handle some of the eventual extensions to
the system if an ACL is parsed by the shell as a single parameter.

	-Mark

-- 
Mark Craig Chu-Carroll,  IBM T.J. Watson Research Center  
*** The Stellation project: Advanced SCM for Collaboration
***		http://www.eclipse.org/stellation
*** Work Email: mcc@xxxxxxxxxxxxxx  ------- Personal Email: markcc@xxxxxxxxxxx