Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-21307

AssignmentService does not allow a SecurityAdvisor on getAssignment

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.9.0
    • Fix Version/s: 2.9.0
    • Component/s: Assignments
    • Labels:
      None

      Description

      Downstream from BaseAssignmentService.getAssignment(), getGroupsAllowFunction() calls AuthzGroupService.isAllowed directly. The getEntityAuthzGroups() method does as well. These should be changed to use SecurityService.unlock(), which serves the same purpose (in fact, the same call) while allowing SecurityAdvisors to be consulted and caching to take effect. In the nominal case, the behavior is the same; it is only altered when a SecuityAdvisor is present in special code.

        Gliffy Diagrams

          Zeplin

            Attachments

              Issue Links

                Activity

                  People

                  Assignee:
                  zqian Zhen Qian
                  Reporter:
                  noahbotimer Noah Botimer
                  Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                    Dates

                    Created:
                    Updated:
                    Resolved:

                      Git Integration