Task #2574
closedLocal admin can't edit identity right after it's created
100%
Description
We have a "local admin", who can manage only a specific group of users (all the users from some organization).
When the admin creates new users, the admin can't edit them immediately. Also, the dashboard is "frozen" in this state even after waiting for 1 minute (or manually evicting the permission-cache) - the admin must logout and login, or press F5.
This is similar to the issue #2384, but we can simulate it without any project specific implementation (only extras module). This is also quite a common request from our customers so we would like to have some product-way to solve this issue.
Steps to reproduce:
1) Create a role of a "local admin"
2) Create a new user as the local admin.
3) Immediately after saving, you can see only read-only detail
4) Wait for 1 minute or evict core:permission-cache
5) When closing and reopening the detail of the user (by default the dashboard), the expected buttons are still not visible (so you don't see how to get to the full detail, change password or change roles).
Tested on 10.6.1, 10.6.2 and current develop.
Files
Related issues
Updated by Radek Tomiška about 4 years ago
- Related to Task #2366: Authorization policies - use cache for evaluate permissions (loading permissions for eav attributes is slow) added
Updated by Radek Tomiška about 4 years ago
- Status changed from New to In Progress
- Target version set to 10.7.0
Updated by Radek Tomiška about 4 years ago
- Status changed from In Progress to Needs feedback
- Assignee changed from Radek Tomiška to Vít Švanda
- % Done changed from 0 to 90
Evaluating permissions is based on contracts (~ tree structure) in product by default => permission cache is evicted after contract is changed (CUD) for logged identity automatically now, so logged identity will obtain new permissions, after identity (~ contract) is changed.
Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/2c40274b83b2e24c197af98be31d011a5f62a300
Could you provide me a feedback, please?
Updated by Vít Švanda about 4 years ago
- Status changed from Needs feedback to Resolved
- Assignee changed from Vít Švanda to Radek Tomiška
- % Done changed from 90 to 100
Updated by Vít Švanda about 4 years ago
- Status changed from Resolved to Needs feedback
- Assignee changed from Radek Tomiška to Vít Švanda
- % Done changed from 100 to 90
Updated by Vít Švanda about 4 years ago
- Status changed from Needs feedback to Resolved
- Assignee changed from Vít Švanda to Radek Tomiška
- % Done changed from 90 to 100
I did reivew and tested it. Works fine now. Thnaks for this fix.
Updated by Radek Tomiška about 4 years ago
- Status changed from Resolved to Closed