[MAGNOLIA-1582] User groups and roles are not resolving unles directly specified Created: 09/Jun/07  Updated: 23/Jan/13  Resolved: 13/Nov/07

Status: Closed
Project: Magnolia
Component/s: None
Affects Version/s: None
Fix Version/s: 3.5 RC1

Type: Bug Priority: Major
Reporter: zam6ak Assignee: Magnolia International
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
relation
is related to MAGNOLIA-1594 Extend User API to allow fetching all... Closed
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[ ]* Steps to reproduce, expected, and actual results filled
[ ]* Affected version filled
Date of First Response:

 Description   

Scenario

Let say there are 5 users which have special privileges.
Instead of assigning to each user all the necessary roles and groups a special group is created (e.g. GSPECIAL)

Add groups publisher and editor to group GSPECIAL and add as many roles as necessary to group GSPECIAL.
Then add each of 5 users to group GSPECIAL.

Problem #1:

Inbox notification does not work.
None of the members of GSPECIAL have a direct relationship with groups "publisher" and "editor" which are necessary for Inbox notification..However, users DO belong to those groups via indirect group membership...

Problem #2:

Role inheritance does not work.
Getting user roles via API returns only direct assigned roles. In our scenrio that means none of the 5 users have roles defines which is not true. All 5 users have indirect roles defined via group membership.

Perhaps my logic is flawed but if a user is a member of a group which in turn has other groups and roles than that user shold inherit all those roles and groups along with their privileges....

Workaround:

Assign groups and roles directly to user.

Quick solution:

Disable assigning groups and roles in group dialog or abandon groups allthogether (bad idea). I am sure workflow can be based off of roles in that case...



 Comments   
Comment by Magnolia International [ 10/Oct/07 ]

related to MAGNOLIA-1594 i guess

Comment by Philipp Bracher [ 13/Nov/07 ]

resolved with MAGNOLIA-1594

Generated at Mon Feb 12 03:28:18 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.