[ 
https://jira.duraspace.org/browse/DS-652?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18332#action_18332
 ] 

Stuart Lewis commented on DS-652:
---------------------------------

LDAPAuthentication getSpecialGroups looks like it should work ok, as it 
contains the following check before setting the special groups:

if (!context.getCurrentUser().getNetid().equals(""))

The only problem might be if a user has authenticated with a method other than 
LDAP where the netid is used and set.

> Wrong behaviour of special groups at login. Use only special groups of the 
> authetication that DID authenticate the user.
> ------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DS-652
>                 URL: https://jira.duraspace.org/browse/DS-652
>             Project: DSpace
>          Issue Type: Bug
>          Components: DSpace API
>    Affects Versions: 1.6.0
>            Reporter: Flávio Botelho
>            Priority: Major
>         Attachments: Fix_behaviour_of_autentication_specialGroups.patch
>
>
> We have internal users autheticating thru LDAP. And external users are still 
> able to create new users.
> Unfortunally the authentication is putting all external users created thru 
> the Login Authentication also in the ldap.login.specialgroup, of course that 
> is not expected.
> Looking at code at AuthenticationManager it becomes clear that it is adding 
> ALL the special groups of ALL the possible authentication mechanism, which 
> doesnt make any sense whatsoever...
> It should only add special groups of the authentication mechanism that DID 
> authenticate the user.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
https://jira.duraspace.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

------------------------------------------------------------------------------
Oracle to DB2 Conversion Guide: Compatibility Made Easier than Ever Before
New IBM DB2 features make compatibility easy. In this guide, you'll learn 
about native support for PL/SQL, new data types, scalar functions, improved 
concurrency, built-in packages, OCI, SQL*Plus, data movement tools, best 
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to