Hi Thierry,
Although it is globally fine, I have a few comments about the design document: related to the fact that maximum group size and depth are not handled:
- How are membership loop handled (
I mean group A contains group B and group B contains group A
BTW We should probably add a test about that if none already exists )
- How to we prevent memory exhaustion and reasonable response time
( Nothing prevent an entry to be in millions of groups and handling valueset with millions of values will be a nightmare )
IMHO you should add a section, explaining how these two cases are handled.
Regards,
Pierre
--
--
389 Directory Server Development Team