[ http://issues.apache.org/jira/brows...=3Dcomments#ac=
tion_12376017 ]=20

Emmanuel Lecharny commented on DIRSERVER-606:
---------------------------------------------

regarding your proposal :

a) Yeah, we can do that. This is for RC2, and its better to have something =
that works, even if you can read your password, than something that is badl=
y broken.

a-2) I agree with "minimal built-in rules". I used legacy, because it was s=
omething which will be removed soon. I don't know when, may be in 1.1 or in=
1.0

b) Yes, we have to update the doc.  Feel free to ask Alex about the intrica=
cy of ACI usage with the newer AuthorizationService. As he wrote the code, =
he is the one who know it the best. We sure need this doco if we want users=
not to be puzzled as we are...

Password things : I'm not very confortable with it. I don't like the fact f=
or instance that I can read my passwords in Firefox. The problem is if you =
can do that, then you will have to be parano=C3=AFd  : each time you go to =
have a copy, lock  your computer... I don't see any occasion where clear pa=
ssword need to be shown to the user, even if the files that contains the en=
tries is not crypted (eh eh, another improvment ...). Well, this is another=
problem, and we can fill a JIRA for that, too 

> ou=3Dusers, ou=3Dsystem - user cannot see their own entry
> -----------------------------------------------------
>
>          Key: DIRSERVER-606
>          URL: http://issues.apache.org/jira/browse/DIRSERVER-606
>      Project: Directory ApacheDS
>         Type: Bug

>     Versions: 1.0-RC1
>  Environment: JDK 1.4.1
> Tried both JXplorer, and from ACEGI security
>     Reporter: Marc Batchelor
>     Assignee: Stefan Zoerner
>     Priority: Critical
>  Attachments: patch.txt, patch_DIRSERVER-606_2.txt
>
> User binds to ApacheDS as a user under ou=3Dusers, ou=3Dsystem. The user =
cannot see their own entry to get their own attributes.
> Documentation states: Users cannot see other user entries under the 'ou=
=3Dusers,ou=3Dsystem' entry.
> Agreed and understood. But, the user, after binding with the directory, c=
annot even find their own entry to get their own attributes.=20

--=20
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secur...nistrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira

[ Post a follow-up to this message ]