Uploaded image for project: 'PhenoTips'
  1. PT-3746

Passing a group to EntityAccessManager.isAdministrator triggers an XWiki permissions cache bug

    Details

    • Sprint:

      Description

      Passing a group to PatientAccessHelper.isAdministrator (1.3) or EntityAccessManager.isAdministrator (1.4) results in a call to AuthorizationManager.hasAccess with a group reference. This may trigger XWIKI-12862 and cause loss of permissions for users belonging to that group if the group is not already in the cache.

        Attachments

          Issue links

            Activity

              People

              • Assignee:
                alina Alina Gvozdik
                Reporter:
                alina Alina Gvozdik
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: