COmanage Developers List

["Michael R. Gettes" <>]

If one decided to switch to use the fedora directory server (formerly  
iPlanet)
and given the stem-style naming scheme of groups from grouper - then  
controlling
app access to groups becomes a somewhat trivial exercise in defining  
ACIs in the
directory which could easily be handled by a reasonable interface  
given the new
dashboard approach.  In other words, quite solvable.

/mrg

On Dec 22, 2008, at 9:41, Emily Eisbruch wrote:

> Limiting Groups for an Application
>
> Tom raised the question of how to limit which groups are available/ 
> presented for an application. There may be cases when there are many  
> groups, far more than should be listed in a UI.
>
> The group agreed it will be important to have control over the view  
> each application has on the groups in LDAP, but this has not yet  
> been implemented.