angela created OAK-4346:
---------------------------

             Summary: SyncMBeanImpl.syncExternalUsers doesn't check for foreign 
IDP
                 Key: OAK-4346
                 URL: https://issues.apache.org/jira/browse/OAK-4346
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: auth-external
            Reporter: angela


in the light of OAK-4264 i found that {{SyncMBeanImpl.syncExternalUsers}} 
doesn't verify that the given external-ids belong to the same IDP that the bean 
has been created for.

my expectation for the result-messages was an operation key {{for}} (FOREIGN) 
but instead the user might even be synchronized depending on the behavior of 
the IDP or result in {{nsi}} if the a given userID is (by coincidence) not 
known to the IDP.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to