Ticket #181 (closed defect: worksforme)

Opened 1 year ago

Last modified 2 months ago

When giving new credentials to access_denied form login session is not updated

Reported by: rambo Assigned to: rambo
Priority: major Milestone: 8.09.0 Ragnaroek
Component: MidCOM core Version: 1.8 Thor
Keywords: Cc:

Description

When a login session is already active and we get access_denied form (not enough privileges for particular view) when we give privileges we get the page underneath, but the login session is not updated thus we get the same error on next load as well, this makes it impossible to for example submit data to such page.

Change History

11/14/07 18:48:45 changed by bergie

Are you sure this is not a side-effect of #179 ?

(ok, since privileges do not run under DBA they may not invalidate cache... must check)

11/14/07 18:55:39 changed by bergie

On a second thought... looks like privilege creation only invalidates cache of the object the priv applies to. I wonder if we should modify it to invalidate caches of all child objects

03/13/08 14:13:54 changed by bergie

  • milestone changed from MidCOM 2.8 to MidCOM 2.9.

09/30/08 14:10:43 changed by bergie

  • milestone changed from MidCOM 2.9 to 8.09 Ragnaroek.

10/06/08 10:38:44 changed by bergie

Actually, adding privileges for a group or person should invalidate cache for that group or person.

10/07/08 16:25:24 changed by bergie

  • owner changed from tarjei to rambo.
  • version set to 1.8 Thor.

10/08/08 18:26:13 changed by bergie

  • status changed from new to closed.
  • resolution set to worksforme.

I couldn't duplicate this. I did the following:

  • Create a user that belongs to group that doesn't have Asgard permissions
  • Try to go to Asgard as that user
  • Get Access Denied screen
  • With another browser: go to Asgard and give that group Asgard permissions
  • In original browser, reload
  • Page works as expected, as do following pages too

10/08/08 22:17:45 changed by rambo

  • status changed from closed to reopened.
  • resolution deleted.

Seems I was unclear, what I meant:

  1. have user that has no asgard privileges
  2. try to go to asgard, get login screen
  3. enter admin login credentials
  4. load another page in asgard (and get the login screen again...)

10/09/08 09:29:39 changed by bergie

  • status changed from reopened to closed.
  • resolution set to worksforme.

Even with that procedure I'm unable to duplicate.