Re: New user has less permission than the anonymous user!

>> I see a number of potential fixes here as follows
>> [snip]
>> 2) Reuse the "scarab.anonymous.rolename" property. Then in
>> ScarabUserImpl.createNewUser()
>> check if anonymous login is permitted and if so add the anonymous role
>> to the new user.
>>
>> I will implement the latter option now and see how it goes. If it works
>> and i hear nothing in the next few days, silence is consent, i'll
>> commit it.
>>
> Mick; though I've not looked at it deeply, I'd favour the second option.
> The 'anonymous' role is a workaround, thought as a mean of providing
> public access to the system building upon the existing infrastructure.
> So I don't see the need for configuring if a new user must get the
> anonymous role. *Every user* must get it, so he will not miss privileges
> when logged in (stop doing things he was able to do when not logged in).

committed in r10556

i didn't use the "scarab.anonymous.rolename" property directly, but 
looped through the anonymous user's roles, foreach module, and granted 
them to the new user.

~mck
-- 
"If we look at the path, we do not see the sky." Native American saying
| www.semb.wever.org | www.sesat.no | www.sesam.no |