[
https://jira.nuxeo.com/browse/NXP-8011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=106923#comment-106923
]
Sun Tan commented on NXP-8011:
------------------------------
My use case is based on CMF groups:
I have an organization with the following groups and subgroups:
Nuxeo - Services department - Atlantis Team
Nuxeo - Services department - Starship Team
Nuxeo - Marketing department
Eric is in the group Nuxeo
Xavier is in the group Services department and can see
Darcy and Vladimir is in Atlantis Team
When Darcy or Vladimir log in, they can only see Atlantis Mailbox
When Xavier logs in, he can see Services and Atlantis and Starship mailboxes
When Eric logs in, he can see Nuxeo - Services - Atlantis - Starship and
Marketing
> Computing all groups in NuxeoPrincipal is adding all the parent groups
> instead of the sub groups
> ------------------------------------------------------------------------------------------------
>
> Key: NXP-8011
> URL: https://jira.nuxeo.com/browse/NXP-8011
> Project: Nuxeo Enterprise Platform
> Issue Type: Bug
> Components: Security / Rights
> Affects Versions: 5.4.2
> Reporter: Sun Tan
> Assignee: Sun Tan
> Fix For: 5.5
>
>
> nuxeo-services/nuxeo-platform-usermanager-api/src/main/java/org/nuxeo/ecm/platform/usermanager/NuxeoPrincipalImpl.java
> line 344
> {code}
> groupsToProcess.addAll(nxGroup.getParentGroups());
> {code}
> instead of
> {code}
> groupsToProcess.addAll(nxGroup.getMemberGroups());
> {code}
> With the current behavior,the field allGroups contains all the parent groups
> (but shouldn't).
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
