Comments (6)
The readOnly
mutability for users indicates that RCF is assuming that the membership information belongs to Group, but RFC does not mandate how to implement that.
However, this implies some scalability issues (how could we return a Group's JSON representation that has millions of users?).
Furthermore, do not forget "redundancy". We're using a non-relation DB so both ways could co-exist.
from scimd.
@leogr My idea is to use listener to assign a group to the user (or an organization to a department, etc) and, in general, to assign a reference to a resource with a specific readOnly attribute when you're creating (or updating, or deleting) a resource with the referenced readWrite attribute (the members in Group).
from scimd.
Sorry @alelb remind me. When you are talking about listeners you are referring to hooks, right?
from scimd.
@leodido Yes, I am referring to hooks.
from scimd.
Assuming hooks are used in order to sync the $ref within the User's document and membership will be stored within the Group's document, isn't it?
If so, Group's document could grow indefinitely, that's a scalability issue.
However, temporarily we may go on this way, but we shall fix it later.
What do you think about that?
from scimd.
@leogr you are right.
Notice that both in the User's groups attribute and in the Group's members attribute the $ref attribute is and remains an identifier. There is no incapsulation of one document into another.
from scimd.
Related Issues (20)
- Fix toResource method HOT 1
- Create successfully calls don't return the newly created resource HOT 5
- Server handlers HOT 3
- Check lastModified works as intended HOT 1
- What Contexts has to do when the ResourceType is nil? HOT 2
- Giving an empty ResourceType to Contexts() HOT 2
- query.Resource doesn't perform attributes projection when there aren't included and excluded attributes
- Auth features HOT 1
- If using gin binding features upgrade its validator to v9
- Code review HOT 2
- Endpoint for authenticated subject alias HOT 2
- Harness test suite HOT 1
- Verify that User resources returned by storage contain the x509Certificate attribute
- Filtering of static resources
- Schemas common attribute is not required when there is a custom configuration
- Filters should be case sensitive or not? HOT 3
- Hooks should be defined in the server implementation
- CanonicalValues check should be configurable via SPC configuration HOT 3
- Clarification about readOnly attributes HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scimd.