[
https://issues.apache.org/jira/browse/SYNCOPE-1293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426614#comment-16426614
]
ASF subversion and git services commented on SYNCOPE-1293:
----------------------------------------------------------
Commit a8ae113d902e33ba27e03dd5d250187868f45c41 in syncope's branch
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=a8ae113 ]
[SYNCOPE-1293] Explicitly allow token Vs comparison
> Default password reset notifications not working
> ------------------------------------------------
>
> Key: SYNCOPE-1293
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1293
> Project: Syncope
> Issue Type: Bug
> Components: common
> Affects Versions: 1.2.11, 2.0.8
> Reporter: DmitriyB.
> Assignee: Francesco Chicchiriccò
> Priority: Minor
> Fix For: 1.2.12, 2.0.9, 2.1.0
>
>
> Reset password notification may contain "about" value with a "filter"
> property.
> And "token" field of a "UserTO" may be used in a fiql query of password
> reset notification.
> E.g. {{token!=$null}} query can be used as a filter value JPAAnyAbout entity
> which is a part of JPANotification entity.
> If token field is not searchable for UserTO object, then
> SearchCondVisitor#createAttributeCond(final String schema) creates
> AttributeCond object instead of AnyCond object, and therefore
> NotificationManagerImpl skips password reset notification and doesn't process
> it correctly (look at
> [NotificationManagerImpl|https://github.com/apache/syncope/blob/master/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/notification/NotificationManagerImpl.java#L344]).
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
