Yes, I see. How is that an admin will specify a CRS user will be specified
for access rights? Simply provide an email for someone it knows is already
in the system? What if that user is not already in the system (I see
programmatically that it produce an exception). I suppose this is a
question of how one becomes a user in CRS, which is by way of login. So,
I'm sort of rambling here, but it seems odd to allow specifying by email or
first/last in the hopes that there is a match on an existing CRS user.
Ideally, we would give them a list of users, but there's no context from
which to determine which users that conference admin should or would want
to see.



On Tue, Jan 14, 2014 at 4:46 PM, Ryan Carlson <notifications@github.com>wrote:

> In src/main/java/org/cru/crs/api/process/PermissionProcess.java:
>
> > +import javax.ws.rs.BadRequestException;
> > +
> > +import org.ccci.util.time.Clock;
> > +import org.cru.crs.api.model.Permission;
> > +import org.cru.crs.auth.model.CrsApplicationUser;
> > +import org.cru.crs.model.UserEntity;
> > +import org.cru.crs.service.PermissionService;
> > +import org.cru.crs.service.UserService;
> > +
> > +public abstract class PermissionProcess {
> > +
> > +	@Inject PermissionService permissionService;
> > +	@Inject UserService userService;
> > +	@Inject Clock clock;
> > +	
> > +	protected void preparePermissionForDatabase(Permission permission, UUID conferenceId, CrsApplicationUser crsLoggedInUser) {
>
> I'm assuming the client will not know the user ID off hand, but rather
> would have to look it up by one of these two means. Is there a way
> otherwise the client would know the ID for a given user?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/CruGlobal/conf-registration-api/pull/114/files#r8877562>
> .
>