PAGS Overview
The PAGS defines group memberships by logical expressions on attributes retrieved by PersonDirectory. (PersonDirectory initializes IPersons with attributes retrieved from one or more sources of directory information, including, for example LDAP.)
Capabilities of PAGS
PAGS computes entity memberships by testing the value of selected IPerson attributes. Like PersonDirectory, the PAGS retrieves information one user at a time. As a result, it can answer inquiries about what groups a particular IPerson or _group member_ belongs to, but it cannot answer inquiries about what entity members are contained by a given group.
Can do:
Code Block |
---|
contains() find() findContainingGroups() |
Can't do:
Code Block |
---|
findEntitiesForGroup() |
Although PAGS groups cannot answer their entity members, they are aware of their member groups. So they can also do:
Can do
Code Block |
---|
findMemberGroupKeys() findMemberGroups() |
...