[
https://issues.jboss.org/browse/SEAMSECURITY-58?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12598735#comment-12598735
]
wiktorowski maximilien commented on SEAMSECURITY-58:
----------------------------------------------------
hi,
i'm not sure it is a good practice in all cases, for example someone can
administrate a group of doctors without being a doctor.
Maybe it's better in your case to also add the user in group USERS if you want
it to have user's rights
Best regards
> identity.inGroup method should return true for a user when the user is
> assigned a role within that group using identity.addRole
> -------------------------------------------------------------------------------------------------------------------------------
>
> Key: SEAMSECURITY-58
> URL: https://issues.jboss.org/browse/SEAMSECURITY-58
> Project: Seam Security
> Issue Type: Feature Request
> Affects Versions: 3.0.0.Final
> Reporter: Martin Gencur
> Assignee: Shane Bryzak
> Fix For: Future
>
>
> Currently when I use identity.addRole("admin", "USERS", "GROUP") for certain
> user and then invoke identity.inGroup("USERS", "GROUP") on that user, I get
> false. This is visible e.g. in an Authorization example where "admin" user
> cannot perform operations dedicated to a simple "user".
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
seam-issues mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/seam-issues
