Passing a group to EntityAccessManager.isAdministrator triggers an XWiki permissions cache bug

Description

Passing a group to PatientAccessHelper.isAdministrator (1.3) or EntityAccessManager.isAdministrator (1.4) results in a call to AuthorizationManager.hasAccess with a group reference. This may trigger XWIKI-12862 and cause loss of permissions for users belonging to that group if the group is not already in the cache.

Environment

None

Status

Assignee

Alina Gvo

Reporter

Alina Gvo

Labels

None

External issue ID

None

External issue ID

None

Components

patient-access-rules

security

Fix versions

1.4-rc-1

1.3.8

Affects versions

1.3.7

1.4-milestone-4

Priority

Blocker