Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Switch user and parametr always_authenticate_before_granting #8974

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
Cinal opened this issue Sep 10, 2013 · 1 comment
Closed

Switch user and parametr always_authenticate_before_granting #8974

Cinal opened this issue Sep 10, 2013 · 1 comment
Labels
Security

Comments

@Cinal
Copy link

Cinal commented Sep 10, 2013

Hi,

I need update user's security group without logout him, to see changes, so I had set parameter "always_authenticate_before_granting: true" in security.xml. This is working as expected, but unfortunatly I have a problem with switching user. When i switch to another user with role ROLE_ALLOWED_TO_SWITCH and gain all roles assigned to that user i have no extra role: ROLE_PREVIOUS_ADMIN and cannot back to previous role.

Any help appreciated.

Marcin
@henrikbjorn
Copy link
Contributor

You should ask on the mailinglist

@fabpot fabpot closed this as completed Sep 10, 2013
@pawaclawczyk pawaclawczyk mentioned this issue Sep 11, 2013
Closed
fabpot added a commit that referenced this issue Dec 29, 2013
@fabpot
bug #8997 [Security] Fixed problem with losing ROLE_PREVIOUS_ADMIN ro…
0285bfd 
…le. (pawaclawczyk)

This PR was squashed before being merged into the 2.3 branch (closes #8997).

Discussion
----------

[Security] Fixed problem with losing ROLE_PREVIOUS_ADMIN role.

<table>
  <tr>
    <td><b>Q</b></td>
    <td><b>A</b></td>
  </tr>
  <tr>
    <td>Bug fix?</td>
    <td>yes</td>
  </tr>
  <tr>
    <td>New feature</td>
    <td>no</td>
  </tr>
  <tr>
    <td>BC breaks?</td>
    <td>no</td>
  </tr>
  <tr>
    <td>Deprecations?</td>
    <td>no</td>
  </tr>
  <tr>
    <td>Tests pass?</td>
    <td>yes</td>
  </tr>
  <tr>
    <td>Fixed tickets</td>
    <td>#3085, #8974</td>
  </tr>
  <tr>
    <td>License</td>
    <td>MIT</td>
  </tr>
  <tr>
    <td>Doc PR</td>
    <td>n/a</td>
  </tr>
</table>

Problem occurs while user is impersonated. Authentication process generates new token and doeas not preserve role ```ROLE_PREVIOUS_ADMIN```. Ex. when parameter ```security.always_authenticate_before_granting``` is enabled.

Commits
-------

a7baa3b [Security] Fixed problem with losing ROLE_PREVIOUS_ADMIN role.
@dsentker dsentker mentioned this issue Jul 26, 2019
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Cinal @henrikbjorn @fabpot