NAC

Suggested interface:

class PrimaryGroupManager
{

public:

void
addMember(const& Name memberName, const& PublicKey publicKey);

void
removeMember(const& Name memberName, /* Shared secret? */);

private:

void
removeMember(const& Name memberName);

}

This is sort of oversimplified, but it seems like this is the minimum amount of info required to get this working; new members just need to provide a name to index to their key in the repo. The same goes for removing members. Two questions arise here:

1) Is the 'repo' in a common location, and what type of repo is it? Assuming that only the primary group manager should be the only 'writer', should there be a constructor argument providing it the access key?

2) In regards to the 'removeMember', and in some cases the 'addMember', should anyone be allowed to add/remove from the group? Should we implement some sort of secret shared between a member and the PGM so that Member A cannot add/remove Member B without its knowledge? Similarly, can anyone add themselves to a group, or should the PGM have some constructor parameter that enables it to allow only certain members?