Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-26153

Use doPrivileged() for getUserModel to fetch references in Shibboleth Invitation

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 9.10, 10.2
    • Fix Version/s: 9.10-HF22, 10.3
    • Component/s: Shibboleth
    • Release Notes Summary:
      Shibboleth invitations work with an existing user.
    • Backlog priority:
      800
    • Sprint:
      nxsupport 10.3.4
    • Story Points:
      2

      Description

      It is proposed to use doPrivileged() for getUserModel to fetch references in Shibboleth Invitation

      Without this, the `getUserModel()` function in `getOrCreateAndUpdateNuxeoPrincipal` fails to retrieve existing user, and we then fallback to the user creation code which fails because the user already exists.
      This bug was introduced by commit d16b875 when the `findUser()` function (which use `doPrivileged` for search) was replaced by a simple `getUserModel()` without a doPrivileged.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 0 minutes
                0m
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours, 10 minutes
                2h 10m

                  PagerDuty

                  Error rendering 'com.pagerduty.jira-server-plugin:PagerDuty'. Please contact your Jira administrators.