Uploaded image for project: 'GeoServer'
  1. GeoServer
  2. GEOS-7803

GeoFence Embedded Server does not check for plain Rule Services

    Details

      Description

      GeoFence Server InternalUserResolver currently checks only User Group Services

      for (String serviceName : securityManager.listUserGroupServices()) {
      ...

      this completely ignoring roles associate to users from a plain Role Service.

      The proposal is to add a check for Role Services too

      for (String roleServiceName : securityManager.listRoleServices()) {
      if (securityManager.loadRoleService(roleServiceName).getRolesForUser(username) != null &&
      !securityManager.loadRoleService(roleServiceName).getRolesForUser(username).isEmpty())

      { return true; }

      }

        Attachments

          Activity

            People

            • Assignee:
              afabiani Alessio Fabiani
              Reporter:
              afabiani Alessio Fabiani
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: