Changes between Version 26 and Version 27 of S3/S3AAA/OrgAuth
- Timestamp:
- 09/04/12 10:17:25 (13 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
S3/S3AAA/OrgAuth
v26 v27 31 31 The entry "Default Realm" means all entities the user is (or will be) an organisation unit of at the time of the request authorization. 32 32 33 That means, any future affiliation of the current user will assign the user this role for the respective entity.33 '''NOTE:''' The "Default Realm" setting can be dangerous and may be inappropriate for most multi-tenancy settings, because the user would automatically receive this role for any entity they will ever join in future - without that entity being anyhow in control of this. However, in certain deployments, this dynamic realm may still be convenient practice. 34 34 === Realm Hierarchy === 35 35