[seam-issues] [JBoss JIRA] Commented: (SEAMSECURITY-58) identity.inGroup method should return true for a user when the user is assigned a role within that group using identity.addRole

[wiktorowski maximilien (JIRA)]

    [ https://issues.jboss.org/browse/SEAMSECURITY-58?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12598735#comment-12598735 ] 

wiktorowski maximilien commented on SEAMSECURITY-58:
----------------------------------------------------

hi,

i'm not sure it is a good practice in all cases, for example someone can administrate a group of doctors without being a doctor.
Maybe it's better in your case to also add the user in group USERS if you want it to have user's rights

Best regards

> identity.inGroup method should return true for a user when the user is assigned a role within that group using identity.addRole
> -------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SEAMSECURITY-58
>                 URL: https://issues.jboss.org/browse/SEAMSECURITY-58
>             Project: Seam Security
>          Issue Type: Feature Request
>    Affects Versions: 3.0.0.Final
>            Reporter: Martin Gencur
>            Assignee: Shane Bryzak
>             Fix For: Future
>
>
> Currently when I use identity.addRole("admin", "USERS", "GROUP") for certain user and then invoke identity.inGroup("USERS", "GROUP") on that user, I get false. This is visible e.g. in an Authorization example where "admin" user cannot perform operations dedicated to a simple "user".

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira