[ 
http://jira.nuxeo.org/browse/NXP-2527?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Anahide Tchertchian updated NXP-2527:
-------------------------------------

    Upgrade notes: 
When test code needs to open a session with administrator, username must be 
added explicitely in session context when opening it.
For instance:

// opening a system session
Framework.login();
RepositoryManager manager = Framework.getService(RepositoryManager.class);
Map<String, Serializable> context = new HashMap<String, Serializable>();
context.put("username", "system");
coreSession = manager.getRepository(repo).open(context);

> Fix security issue in local session
> -----------------------------------
>
>                 Key: NXP-2527
>                 URL: http://jira.nuxeo.org/browse/NXP-2527
>             Project: Nuxeo Enterprise Platform
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 5.1.5
>            Reporter: Anahide Tchertchian
>            Assignee: Anahide Tchertchian
>             Fix For: 5.1.6
>
>
> When creating a session without a principal, one named "Administrator" is 
> used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets

Reply via email to