[no subject]

Atul also raised the question, whether a userContext=null couldn't also
mean this guest user?
In that case we loose the initial intent to assert categories to guest
users.

So I see the following flaws currently and the following options:

1. we need to get rid of the MUST of userCategory=wsrp:minimal in that
case.Otherwise it doesn't make any sense to assert any category, the
Producer could always make a default assertion to wsrp:minial or any other
category if he sees userContextKey=wsrp:minimal
2. user userContextKey=wsrp:minimal for guest user's and allow the consumer
to assert any category for these users (which the producer declared as
supported) -- it's another question if the producer follows this assertion.
3. userContext=null as defined currently: no assumptions about the user, no
(predefined) category assertions
4. userContext=null equals anonymous user?: producer can treat the user as
he would treat it in 2. but assert a default "guest" category of its choice
(I think consumer would do something anyways and is already covered).

My opinion is:
we should do 1., 2. and 3..


Mit freundlichen Gruessen / best regards,

        Richard Jacob
______________________________________________________
IBM Lab Boeblingen, Germany
Dept.8288, WebSphere Portal Server Development
WSRP Standardization Technical Lead
Phone: ++49 7031 16-3469  -  Fax: ++49 7031 16-4888
Email: mailto:richard.jacob@de.ibm.com