aboutsummaryrefslogtreecommitdiff
path: root/TODO
diff options
context:
space:
mode:
authorRuss Allbery <rra@stanford.edu>2007-08-28 23:42:22 +0000
committerRuss Allbery <rra@stanford.edu>2007-08-28 23:42:22 +0000
commit621e65ff55a4b9105d8d40f9868895a665d890dd (patch)
tree672d4233d69426bf470dd7ccc4bd6476c93fe076 /TODO
parent1c5fb26508d78585917253b3f422f9b9ad7b5498 (diff)
Flesh out with all the other stuff that needs to be done. This isn't
complete yet, since there are some parts of the implementation I've not even really started.
Diffstat (limited to 'TODO')
-rw-r--r--TODO20
1 files changed, 20 insertions, 0 deletions
diff --git a/TODO b/TODO
index 3322a37..bf12b60 100644
--- a/TODO
+++ b/TODO
@@ -1,10 +1,30 @@
wallet To-Do List
+* Testing. Most of the classes have no tests at all right now. Doing
+ meaningful testing will require finding a way to set up a database
+ for testing purposes, probably using sqlite.
+
+* Documentation missing for Wallet::Server, Wallet::ACL, Wallet::Config,
+ and Wallet::Object::Keytab.
+
+* Implement default ACL policy to allow dynamic object creation on first
+ request for keytabs.
+
* Remove the hard-coded ADMIN ACL in the server with something more
configurable, perhaps a global ACL table or something.
+* Implement flags, including support for the unchanging attribute on
+ keytabs and the corresponding back-end remctl calls to retrieve the
+ existing keytab.
+
+* Implement the locked flag.
+
* The ACL implementation is currently rather inefficient for ACL
verifiers that need to maintain state (such as LDAP binds). Now
they're created and destroyed when verifying each ACL. We need to
somehow return global verifiers, probably through a factory
implementation.
+
+* There's a lot of code duplication in the dispatch functions in the
+ Wallet::Server class. Find a way to rewrite that so that the dispatch
+ doesn't duplicate the same code patterns.