-
Type:
Bug
-
Status: Resolved
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 9.10, 10.2
-
Component/s: Shibboleth
-
Release Notes Summary:Shibboleth invitations work with an existing user.
-
Backlog priority:800
-
Sprint:nxsupport 10.3.4
-
Story Points:2
It is proposed to use doPrivileged() for getUserModel to fetch references in Shibboleth Invitation
Without this, the `getUserModel()` function in `getOrCreateAndUpdateNuxeoPrincipal` fails to retrieve existing user, and we then fallback to the user creation code which fails because the user already exists.
This bug was introduced by commit d16b875 when the `findUser()` function (which use `doPrivileged` for search) was replaced by a simple `getUserModel()` without a doPrivileged.
