eclipse-sailing-analytics/sailing-analytics
1
0
Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-09-21 21:25:38 +00:00
Code Activity

drop group-qualified role while loading User object if group not found

Browse Source
This commit is contained in:
Axel Uhl
2025-05-16 11:14:59 +02:00
parent dac3379b26
commit 06e47b387d
1 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/DomainObjectFactoryImpl.java
+12 -6
View File
@@ -380,17 +380,23 @@ public class DomainObjectFactoryImpl implements DomainObjectFactory {
private Role loadRoleWithProxyUserQualifier(Document rolesO, Map<UUID, RoleDefinition> roleDefinitionsById,
Map<UUID, UserGroup> userGroups) {
final RoleDefinition roleDefinition = roleDefinitionsById.get(rolesO.get(FieldNames.Role.ID.name()));
final Role result;
if (roleDefinition == null) {
result = null;
} else {
final UUID qualifyingTenantId = (UUID) rolesO.get(FieldNames.Role.QUALIFYING_TENANT_ID.name());
final UserGroup qualifyingTenant = qualifyingTenantId == null ? null : userGroups.get(qualifyingTenantId);
final User proxyQualifyingUser = rolesO.get(FieldNames.Role.QUALIFYING_USERNAME.name()) == null ? null
: new UserProxy((String) rolesO.get(FieldNames.Role.QUALIFYING_USERNAME.name()));
final boolean transitive = rolesO.getBoolean(FieldNames.Role.TRANSITIVE.name(), true);
result = new Role(roleDefinition, qualifyingTenant, proxyQualifyingUser, transitive);
UserGroup qualifyingGroup = null;
if (qualifyingTenantId != null && (qualifyingGroup = userGroups.get(qualifyingTenantId)) == null) {
logger.severe("Unable to resolve tenant with ID "+qualifyingTenantId+
" which serves as a role qualifier for role "+roleDefinition.getName()+
"; dropping role");
result = null;
} else {
final User proxyQualifyingUser = rolesO.get(FieldNames.Role.QUALIFYING_USERNAME.name()) == null ? null
: new UserProxy((String) rolesO.get(FieldNames.Role.QUALIFYING_USERNAME.name())); // if user proxy later cannot be resolved, role will be dropped
final boolean transitive = rolesO.getBoolean(FieldNames.Role.TRANSITIVE.name(), true);
result = new Role(roleDefinition, qualifyingGroup, proxyQualifyingUser, transitive);
}
}
return result;
}