...
- Simple API (like OpenSymphony), or complex
- More operations that are well defined (KIM), or fewer operations with options (Grouper)?
- Should we separate out the consumption vs the management of groups (i.e. read groups from subject vs add subject to group)
Group namespaces
- Is a Group a Subject? i.e. can you add a group to a group with the same operation as add user to group?
- Deep namespace or one level namespace?
- Besides group namespace (folders), is there some sort of "source" for a group (e.g. group system, dynamic, group system B, etc)
- Can you filter operations by namespace (i.e. groups a subject is in that are in a certain namespace directly or indirectly)?
...