Project

General

Profile

Actions

Feature #2439

closed

Authentication: Switch user

Added by Radek Tomiška over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Authentication / Authorization
Target version:
Start date:
08/17/2020
Due date:
% Done:

100%

Estimated time:
Owner:

Description

Implement switch user feature. Super admin can login as other user - to test and debug purpose mainly.


Related issues

Related to IdStory Identity Manager - Feature #2445: Authentication: Switch user permissionClosedRadek Tomiška08/18/2020

Actions
Related to IdStory Identity Manager - Defect #2514: Authentication: Remote authentication cycle in FE (FE is stucked with reload)ClosedRadek Tomiška10/14/2020

Actions
Related to IdStory Identity Manager - Defect #2566: Fill originalCreatorId and originalModifierId for assigned roles (possible loss of audit info when changing login of admin)ClosedRadek Tomiška11/09/2020

Actions
Related to IdStory Identity Manager - Defect #2589: Fill originalModifier and originalModifierId for changed entities (possible loss of audit info when changing entities multiple times)ClosedRadek Tomiška11/27/2020

Actions
Actions #1

Updated by Radek Tomiška over 3 years ago

  • % Done changed from 50 to 80
Actions #2

Updated by Radek Tomiška over 3 years ago

  • Related to Feature #2445: Authentication: Switch user permission added
Actions #3

Updated by Radek Tomiška over 3 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 80 to 90

I fixed issue with original identity usage in workflow task approval, commit:
https://github.com/bcvsolutions/CzechIdMng/commit/410a2bfd93aba88a85fcaa30cd58a541cc38b605

Documentation added:
https://wiki.czechidm.com/devel/documentation/security/dev/security#switch_user_-_login_as_other_user

Could you provide me a feedback, please?

Actions #4

Updated by Vít Švanda over 3 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Vít Švanda to Radek Tomiška

I did reivew and test. Thanks for this awesome feature.

I found one problem. In the LoginService.switchUserLogout you uses originalUsername for login back to original user. In this case, but I was able rename the username of other identity to the original. This other identity was used after login on original user.

Actions #5

Updated by Radek Tomiška over 3 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda

Thx for feedback! I fixed UC above too :), identity identifier is used now in logout method.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/a8875cdb1f0db9d48ee497e6f093eb053abb3cf7

Could you provide me feedback again, please?

Actions #6

Updated by Vít Švanda over 3 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

I did reivew and tested it. Thanks for that. LGTM

Actions #7

Updated by Radek Tomiška over 3 years ago

  • Status changed from Resolved to Closed
Actions #8

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2514: Authentication: Remote authentication cycle in FE (FE is stucked with reload) added
Actions #9

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2566: Fill originalCreatorId and originalModifierId for assigned roles (possible loss of audit info when changing login of admin) added
Actions #10

Updated by Radek Tomiška over 3 years ago

  • Related to Defect #2589: Fill originalModifier and originalModifierId for changed entities (possible loss of audit info when changing entities multiple times) added
Actions

Also available in: Atom PDF