Skip to content
This repository was archived by the owner on Jul 2, 2020. It is now read-only.
This repository was archived by the owner on Jul 2, 2020. It is now read-only.

Domain Admin Permissions are cached without permissions #81

@tpokorra

Description

@tpokorra

we have had a test case with a domain admin, that was not able to add users. only read on domain.

lib/api/kolab_api_service_user.php, function capabilities:

should have been:

[ERROR] rights: Array
(
    [add] => w
    [delete] => w
    [edit] => w
    [info] => r
    [find] => r
    [userreport] => r
    [adminreport] => r
    [effective_rights] => r
)

but was:

[ERROR] rights: Array
(
    [info] => r
    [find] => r
    [userreport] => r
    [adminreport] => r
    [effective_rights] => r
)

see caching in lib/Auth/LDAP.php, function effective_rights

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions