i'm ok if you add User.getMembership() and User.setMembership()
for setMembership(User user, Group group), i would prefer something like setMembership(String userId, String groupId); Otherwise, the user will have to lookup the User and Group objects, resulting in potentially 3 transactions depending on the environment.
I agree with Tom in this one :-) I also prefer the use of Ids than the objects as parameters (this also applies to the extensions Facade, i.e the XPDL facade).
Pierre, could you proceed with those additions in the identity module please ?
"I also prefer the use of Ids than the objects as parameters"
just for the record. return values are different. they can/should be the real objects.