-
Bug
-
Resolution: Fixed
-
Major
-
None
-
-
Empty show more show less
-
Basel 68
-
2
To reproduce
- set up RescueSecuritySupport as explained at https://wiki.magnolia-cms.com/display/WIKI/Rescue+Security+Support
- try to edit an existing user property, their password for instance.
- save
No hint on the UI that something went wrong but looking in the logs one can see
2016-03-30 10:37:01,579 ERROR info.magnolia.cms.security.JCRSessionOp : Failed to execute info.magnolia.cms.security.MgnlUserManager$1@57a38fd0 session operation with info.magnolia.cms.security.RescueSecuritySupport$RescueUser cannot be cast to info.magnolia.cms.security.MgnlUser java.lang.ClassCastException: info.magnolia.cms.security.RescueSecuritySupport$RescueUser cannot be cast to info.magnolia.cms.security.MgnlUser at info.magnolia.cms.security.MgnlUserManager$1.doExec(MgnlUserManager.java:138) at info.magnolia.cms.security.MgnlUserManager$1.doExec(MgnlUserManager.java:134) at info.magnolia.cms.security.SilentSessionOp.exec(SilentSessionOp.java:70) at info.magnolia.context.MgnlContext.doInSystemContext(MgnlContext.java:392) at info.magnolia.context.MgnlContext.doInSystemContext(MgnlContext.java:377) at info.magnolia.cms.security.MgnlUserManager.setProperty(MgnlUserManager.java:134) at info.magnolia.security.app.dialog.action.SaveUserDialogAction.createOrUpdateUser(SaveUserDialogAction.java:179) at info.magnolia.security.app.dialog.action.SaveUserDialogAction.execute(SaveUserDialogAction.java:97)
And no changes were persisted, of course.
------
Solution
All users returned by the RescueSecurityManager must be the actual ones coming from the users workspace, except superuser who is the in-memory, temporary RescueUser needed to access AdminCentral and fix the configuration.
Acceptance criteria
- git code review opened
-
-
- Closed
-
