Project

General

Profile

Actions
Copy link

Defect #2900

closed

When I login as other user, after short time IdM stops to respect rights of that user in its behavior

Added by František Neznaj over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Authentication / Authorization
Target version:
11.1.2
Start date:
08/03/2021
Due date:
% Done:

100%

Estimated time:
Affected versions:
11.1.0, 11.1.1
Owner:

Description

  1. I login as superadmin to IdM.
  2. I use "login as other user" to login as standard user with limited rights for testing of features
  3. I can work as expected with target user rights, I can see his Dashboard, Tasks and create new user based one one projection he has rights for
  4. after short time (5-30 seconds, different in each test), the behavior of IdM shifts:
    • Warning ("Insufficient permissions - You do not have sufficient permissions for selected action.") appears in Tasks and Dashboard (it should not)
    • When creating user, I can select from all three projections there (I do have rights for it as superadmin, but target user has rights only for one of them).

Related issues

Related to IdStory Identity Manager - Task #1761: Long polling for refresh role-request stateClosedVít Švanda07/24/2019

Actions
Related to IdStory Identity Manager - Defect #2895: Error page when downloading a report (Firefox)ClosedVít Švanda07/21/2021

Actions
Related to IdStory Identity Manager - Feature #1865: IdM monitoringClosedRadek Tomiška09/19/2019

Actions
Actions
Copy link
 #1

Updated by Radek Tomiška over 2 years ago

  • Related to Task #1761: Long polling for refresh role-request state added
Actions
Copy link
 #2

Updated by Radek Tomiška over 2 years ago

  • Related to Defect #2895: Error page when downloading a report (Firefox) added
Actions
Copy link
 #3

Updated by Radek Tomiška over 2 years ago

Actions
Copy link
 #4

Updated by Radek Tomiška over 2 years ago

  • Status changed from New to In Progress
  • Target version set to 11.2.0

The issue is related to long-polling added in monitoring into main application page (navigation). Authentication used in long pooling is holded for thread on backend and is wrongly reused for switched user on frontend, after long-pooling request is completed.

Workaround: Disable long-polling (using property: 'idm.pub.app.long-polling.enabled'), then the issue does not happen.

Actions
Copy link
 #5

Updated by Radek Tomiška over 2 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Ondrej Husník
  • % Done changed from 0 to 90

I added aborting long-polling requests properly in navigation, after user is switched.

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/59b86f9483a622b33dfc8e15fa0904824075ac66

Could you provide me a feedback, please?

Actions
Copy link
 #6

Updated by Radek Tomiška over 2 years ago

  • Target version changed from 11.2.0 to 11.1.2
  • Affected versions 11.1.2 added
  • Affected versions deleted (11.1.1)
Actions
Copy link
 #7

Updated by Ondrej Husník over 2 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Ondrej Husník to Radek Tomiška
  • % Done changed from 90 to 100
  • Affected versions Forsterite (7.6.0) added

I tried your fix and it acts properly now.

Actions
Copy link
 #8

Updated by Radek Tomiška over 2 years ago

  • Status changed from Resolved to Closed
  • Affected versions deleted (Forsterite (7.6.0))
Actions
Copy link
 #9

Updated by Radek Tomiška over 2 years ago

  • Affected versions 11.1.0, 11.1.1 added
  • Affected versions deleted (11.1.2)
Actions
Copy link

Also available in: Atom PDF