Using base scope in ACL does not work as expected
Using base scope in ACL does not work as expected
Description
Hello,
It looks like the aclrole as base not work like expected. When we assigned an aclrole on "." we can read the users in ou=people
Distribution Name and Version
Debian
FusionDirectory Version
1.3
PHP version used
php7
Origin of php packages
Distribution
Steps to Reproduce
- Create department /A and /B/A
- Assign the manager aclrole to a user (subtree for /A and /B/A) but as base for "."
- If you connect with your user you can see the users in "." and you can also write in /B
Expected behavior:
We cannot see the users in "." and we may not write in /B
Actual behavior:
We see the user in "." an we can write in /B
Reproduces how often: 100%
Activity
mentioned in issue #5921 (closed)
By Jonathan Swaelens on 2019-01-23T12:46:43 (imported from GitLab)
added PJ1802-0188 label
This is a historical problem with the ACL system in FusionDirectory there is no difference between testing ACLs on an object and on its base.
It only causes problems when base scope is used on a non-leaf node like an OU, which is quite uncommon as it’s not much useful.
By Côme Chilliet on 2019-06-11T07:43:49 (imported from GitLab)
changed milestone to %FusionDirectory 1.5
By bmortier on 2019-06-27T08:54:18 (imported from GitLab)
changed milestone to %FusionDirectory 1.4
By Côme Chilliet on 2020-02-06T08:43:02 (imported from GitLab)
mentioned in commit 21a6c3dd
By Côme Chilliet on 2020-02-06T09:18:31 (imported from GitLab)
mentioned in commit ee2648c1
By Côme Chilliet on 2020-02-06T09:26:26 (imported from GitLab)
mentioned in commit 21036333
By Côme Chilliet on 2020-02-06T09:37:59 (imported from GitLab)
added packaging label
