diff options
author | Russ Allbery <rra@stanford.edu> | 2007-08-28 23:42:22 +0000 |
---|---|---|
committer | Russ Allbery <rra@stanford.edu> | 2007-08-28 23:42:22 +0000 |
commit | 621e65ff55a4b9105d8d40f9868895a665d890dd (patch) | |
tree | 672d4233d69426bf470dd7ccc4bd6476c93fe076 | |
parent | 1c5fb26508d78585917253b3f422f9b9ad7b5498 (diff) |
Flesh out with all the other stuff that needs to be done. This isn't
complete yet, since there are some parts of the implementation I've not
even really started.
-rw-r--r-- | TODO | 20 |
1 files changed, 20 insertions, 0 deletions
@@ -1,10 +1,30 @@ wallet To-Do List +* Testing. Most of the classes have no tests at all right now. Doing + meaningful testing will require finding a way to set up a database + for testing purposes, probably using sqlite. + +* Documentation missing for Wallet::Server, Wallet::ACL, Wallet::Config, + and Wallet::Object::Keytab. + +* Implement default ACL policy to allow dynamic object creation on first + request for keytabs. + * Remove the hard-coded ADMIN ACL in the server with something more configurable, perhaps a global ACL table or something. +* Implement flags, including support for the unchanging attribute on + keytabs and the corresponding back-end remctl calls to retrieve the + existing keytab. + +* Implement the locked flag. + * The ACL implementation is currently rather inefficient for ACL verifiers that need to maintain state (such as LDAP binds). Now they're created and destroyed when verifying each ACL. We need to somehow return global verifiers, probably through a factory implementation. + +* There's a lot of code duplication in the dispatch functions in the + Wallet::Server class. Find a way to rewrite that so that the dispatch + doesn't duplicate the same code patterns. |