From: Sander A. <sa....@fz...> - 2019-05-27 12:58:50
|
Hi Krzysztof, within unity 2.4.2 we found some issues for users having the inspector role. 1. A user has inspector role in root group. Within the root group another entity is disabled. Instead of getting the user list, the inspector sees this error: "Problem retrieving group members: pl.edu.icm.unity.exceptions.IllegalIdentityValueException: The entity is disabled" 2. A user is regular user in root group and inspector in one subgroup (/a). The attribute CN got the attribute metadata "Value of this attribute in the root group is used as an entity's displayed name." This attribute is copied by attribute statements within the subgroup. The inspector only sees the list of entities without the name. If the inspector selects one of the entities, the inspector got the lists of available attributes. After selecting one of the attributes, the inspector can read the attributes. 3. A user is regular user in root group, inspector in first level subgroup (/a) and contents manager within second level subgroup (/a/b). The user tries to copy another user from /a into /a/b. The user got the following error: "Access denied. The operation getGroups requires 'read' capability". If the user get inspector role in root group too, it works. I guess this setup is used quit seldom and the issues might be available in the current release too. Best regards, Sander -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ---------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt, Prof. Dr. Sebastian M. Schmidt ----------------------------------------------------------------------- ----------------------------------------------------------------------- |