Hi Manuri,
We tested MB 3.0.0 with this release and our scenario of queue creation
fails after giving a permission denied error. The scenario is as follows:
1. Create a user "user1" with a role assigned with permission to create
queues.
2. Login from "user1" and try to create a queue, we get a permission denied
error.
When creating a queue the following happens from our code.
1. We create an internal role for the queue and assign it to the current
user with permissions assigned.
userRealm.getAuthorizationManager().authorizeRole(roleName, queueId,
PERMISSION_CHANGE_PERMISSION);
2. Next, we create the queue and update permissions for the queue. In
this step, we check if the current user has permissions to change the
queue.
String[] userRoles =
userRealm.getUserStoreManager().getRoleListOfUser(loggedInUser);
for (String userRole : userRoles) {
if (userRealm.getAuthorizationManager().isRoleAuthorized(
userRole, queueID, PERMISSION_CHANGE_PERMISSION)) {
isUserHasChangePermission = true;
}
}
At this stage, *'*(userRealm.getAuthorizationManager().isRoleAuthorized(
userRole, queueID, PERMISSION_CHANGE_PERMISSION))' false
implying that any of roles assigned to the user do not have
permissions to change the queue, thus not allowing the user to create
the queue.
Thank you
On Mon, Oct 12, 2015 at 9:24 PM, Manuri Amaya Perera <[email protected]>
wrote:
> Hi Devs,
>
> WSO2 Carbon Kernel 4.4.2 RC2 Release Vote.
>
> This release fixes the following issues:
> https://wso2.org/jira/issues/?filter=12396
>
> Please download and test your products with kernel 4.4.2 RC2 and vote.
> Vote will be open for 72 hours or longer as needed.
>
> *​Source and binary distribution files:*
> https://svn.wso2.org/repos/wso2/people/aruna/v4.4.2-rc2
>
> *Maven staging repository:*
> http://maven.wso2.org/nexus/content/repositories/orgwso2carbon-019/
>
> *The tag to be voted upon:*
> https://github.com/wso2/carbon-kernel/tree/v4.4.2-rc2
>
>
> [ ] Broken - do not release (explain why)
> [ ] Stable - go ahead and release
>
>
> Thank you
> Carbon Team
>
> --
>
> *Manuri Amaya Perera*
>
> *Software Engineer*
>
> *WSO2 Inc.*
>
> *Blog: http://manuriamayaperera.blogspot.com
> <http://manuriamayaperera.blogspot.com>*
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
--
Sasikala Kottegoda
*Software Engineer*
WSO2 Inc., http://wso2.com/
lean. enterprise. middleware
Mobile: +94 774835928/712792401
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev
