[seam-issues] [JBoss JIRA] Commented: (SEAMSECURITY-58) identity.inGroup method should return true for a user when the user is assigned a role within that group using identity.addRole
[
https://issues.jboss.org/browse/SEAMSECURITY-58?page=com.atlassian.jira.p...
]
wiktorowski maximilien commented on SEAMSECURITY-58:
----------------------------------------------------
hi,
i'm not sure it is a good practice in all cases, for example someone can administrate
a group of doctors without being a doctor.
Maybe it's better in your case to also add the user in group USERS if you want it to
have user's rights
Best regards
identity.inGroup method should return true for a user when the user
is assigned a role within that group using identity.addRole
-------------------------------------------------------------------------------------------------------------------------------
Key: SEAMSECURITY-58
URL: https://issues.jboss.org/browse/SEAMSECURITY-58
Project: Seam Security
Issue Type: Feature Request
Affects Versions: 3.0.0.Final
Reporter: Martin Gencur
Assignee: Shane Bryzak
Fix For: Future
Currently when I use identity.addRole("admin", "USERS",
"GROUP") for certain user and then invoke identity.inGroup("USERS",
"GROUP") on that user, I get false. This is visible e.g. in an Authorization
example where "admin" user cannot perform operations dedicated to a simple
"user".
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira