[Galene] Re: Thoughts on global user passwords

[Juliusz Chroboczek <jch@irif.fr>]

> I've been experimenting with Galene recently, and really like it so far! Except
> for the part where you potentially have to create the same "op" user accounts
> in a bunch of groups, each with their own but identical password. (At least
> that's my understanding of the current system.)

Yes.  The reason it's not a problem for me is that I generally create
a whole hierarchy (using the "auto-subgroups" functionality) rather than
a distinct group for every task.

> I was wondering what you think about adding the ability to store
> usernames/passwords for regular users in the "users" map of "data/config.json"?

I've thought about it, but it's not that easy:

  - data/config.json is read-only, so it won't be possible to add new
    global users through the API;
  - you'd probably want users that only exist in a subhierarchy, for
    example a user that's an op in all groups under "group/teaching/*".

So my take would be to create a database of users, similar to the token
database.

I encourage you to design and implement a proof of concept, but please be
aware that it'll likely not be merged until we find satisfactory answers
to the questions above (and others).

-- Juliusz