Re: New user has less permission than the anonymous user!

>>> New user should IMHO always have the same permissions as the anonymous
>>> user.
> 
> I just hit this problem again and searching the archives
> http://scarab.tigris.org/servlets/BrowseList?
list=users&by=thread&from=333991
> 
> it appears the problem never got fixed.


I see a number of potential fixes here as follows

1) Hussayn's suggestion to have an extra property 
"scarab.user.role.default"

> What about setting the "default role" for new users per configuration?
> scarab.user.role.default=anonymous
> In addition to this global configuration setting, we could enable
> setting the default role per module via the module editor and 
> SCARAB_GLOBAL as store ...

I gather then to add this default role to the user in 
ScarabUserImpl.createNewUser()


2) Reuse the "scarab.anonymous.rolename" property.
Then in 
ScarabUserImpl.createNewUser()
check if anonymous login is permitted and if so add the anonymous role to 
the new user.


My preference is for the latter option. If i've understood things 
correctly is isn't in fact a "more complex configuration", in fact it's 
simpler as it reuses existing properties, and solely tackles the problem 
of a new user having less permissions than the anonymous user.

Maybe explicitly granting the role in 
ScarabUserImpl.createNewUser() isn't the only way. Can anyone suggest a 
smarter way?


I will implement the latter option now and see how it goes. If it works 
and i hear nothing in the next few days, silence is consent, i'll commit 
it.

~mck

-- 
"The only thing I know, is that I know nothing." Socrates
| www.semb.wever.org | www.sesat.no | www.sesam.no |