Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32672

Fix restricted access in maintenance mode

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2021.0
    • Fix Version/s: 2023.14, 2021.56
    • Component/s: Authentication
    • Release Notes Summary:
      Authentication can again be restricted to administrators only. This is not cluster wild.
    • Backlog priority:
      650
    • Team:
      PLATFORM
    • Sprint:
      nxplatform #115
    • Story Points:
      3

      Description

      Prerequisite: install the nuxeo-jsf-ui addon and create a non admin user "joe"

      Steps to reproduce:

      • Log in as Administrator to the JSF UI
      • Navigate to ADMIN > Monitoring > Administrative Statuses
      • Push the "Edit Status" button for Nuxeo Instance
      • Choose Passive in the "Status" dropdown and Save
      • Log out
      • Observe that the login page displays now "Maintenance mode is activated. Only administrators can access the server. "
      • Try to log in as joe
      • The login is sucessful ==> that's the bug

      Expected behavior: joe's authentication fails and he's redirected to the login page

      This bug is caused by JAAS removal (NXP-27942)

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: