[cas-dev] Mutable user Attributes

[Scott Battaglia]

Dale,

I've considered looking into doing something like what you are considering.
It would require another implementation of an AttributePrincipal where the
getAttribute was backed by the PersonAttributeDao.  Its not difficult to do
but it comes down to a one thing:

How to retrieve the attributes in a timely manner?
*  On demand (not very efficient for a large number of attributes but okay
for one or two)
* Cached / Grouped retrieval (requires timeouts, timer threads, etc.).

Its definitely possible.  Its a matter of how best we want to do it.  If we
came up with a good way I would make it the default in CAS.

-Scott


On Thu, Mar 6, 2008 at 6:27 PM, dale77 <Dale.Ogilvie at trimble.co.nz> wrote:

>
> Hello,
>
> we have written our own AttributeRepository implementing
> IPersonAttributeDao
> that returns custom user attributes. This works well for transferring our
> custom attributes through in the CAS validation response.
>
> However, when the user's attributes change after they have logged in, we
> would like subsequent validation requests for that user to return the
> modified attributes. Our primary use case is where the user modifies his
> "profile" attributes which we are sending to applications in the
> validation
> response.
>
> Currently what CAS does is call our attribute repository once when the
> user
> authenticates, then store a copy of the attributes in a SimplePrincipal.
> It
> is the "stale" copy of these attributes which is returned to users when
> they
> validate an new service ticket.
>
> I'd appreciate any advice on how to proceed with a Principal
> implementation
> which hits our AttributeRepository for each service ticket validation
> request, rather than just once at authentication. We want the user
> attributes returned to always be up to date with our back end attribute
> store.
>
> Thanks
>
> Dale
> --
> View this message in context:
> http://www.nabble.com/Mutable-user-Attributes-tp15885364p15885364.html
> Sent from the CAS Dev mailing list archive at Nabble.com.
>
> _______________________________________________
> cas-dev mailing list
> cas-dev at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas-dev
>



-- 
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20080312/2dcbeb11/attachment.html