[ 
https://issues.apache.org/jira/browse/AIRAVATA-2077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15673995#comment-15673995
 ] 

Eroma commented on AIRAVATA-2077:
---------------------------------

Currently when user has user-pending role and an active role is added the 
pending role automatically gets replaced. Similarly if the pending role is 
added back any existing active roles should get removed. This is used to 
restrict the gateway for a user either permanently or temporally. 

Now the last role cannot be removed from the user (this is correct). Only thing 
when tried to remove it even thought it is not removed incorrect message is 
given 'Role has been removed' actually when it is not. When someone tries to 
remove the last role we should give message like 'User has to at least have one 
role'.

> Add some validation for user-role changing
> ------------------------------------------
>
>                 Key: AIRAVATA-2077
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2077
>             Project: Airavata
>          Issue Type: Bug
>            Reporter: Lahiru Gunathilake
>            Assignee: Marcus Christie
>
> Admin can remove user role from pending to nothing. I think we should not let 
> this because no user-role is not a valid state, either user has to be removed 
> or add a meaningful role (disable).
> Main purpose of this issue is to add validation for user-roles. We saw this 
> mistake happen in new admin in phasta gateway.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to