Defect #3041
openAutomatic roles by attribute are sometimes not recomputed after manual change of EAV
0%
Description
Tested on 11.2.1 (Postgres DB in appliance).
We have 55 automatic roles by attribute that use 1 or 2 rules of type "EAV of identity = some value".
When I manually change the EAV of the identity from one value to another, it should remove corresponding automatic roles and assign some other automatic roles.
However, this doesn't happen always. Sometimes not all roles are assigned, sometimes not all roles are removed.
Unluckily, it is very random and it typically works well on the second attempt for the same user and repeated changes => I can't simulate it properly.
One case:
1) Change the value of EAV xxx_stav from B to S and add xxx_opravneni = opravneni-1, opravneni-2, opravneni-4
2) Several roles are removed and added. Everything finishes without any errors.
3) However, when I start ProcessAllAutomaticRoleByAttributeTaskExecutor afterwards, it adds 3 more roles to the user. Evidently, these roles were missing in the recomputation in the step 3.
I believe this worked well in the version 9.7 (at least we never found this issue during testing there).
Files
Updated by Roman Kučera over 2 years ago
- Target version changed from 12.2.0 to 13.0.0
Updated by Tomáš Doischer about 2 years ago
- Target version changed from 13.0.0 to 12.4.0
Updated by Tomáš Doischer almost 2 years ago
- Target version changed from 12.4.0 to 13.1.0