Changes between Version 14 and Version 15 of MapGuideRfc20

Timestamp:

Oct 23, 2007, 3:33:47 PM (17 years ago)

Author:

trevorwekel

Comment:

--

MapGuideRfc20

@@ -48 +48 @@
 This RFC is strictly an API enhancement.  !GetUserForSession exposes information already maintained by the !MapGuide Server.  !EnumerateGroups and !EnumerateRoles will be implemented using existing functionality.
 
-With the new API, hijacking a session identifier will allow access to the username, groups, and roles for a particular user.  Use of HTTPS will reduce the likelihood of session hijack for web sites requiring security.
+With the new API, hijacking a session identifier will allow access to the userid, groups, and roles for a particular user.  Use of HTTPS will reduce the likelihood of session hijack for web sites requiring security.
 
 == Test Plan ==
 
-Write a simple app to verify that users can access their own groups and roles and cannot access information from other groups and roles.
+Write a simple web application to verify that users can access their own groups and roles and cannot access information from other groups and roles unless they have author or administrator privileges.
 
 == Funding/Resources ==