Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-6007

Preview changes requires an extra authorization

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 4.0.2
    • 4.1
    • GUI
    • Internal

    Description

      User has permission to update some of his attributes.
      Everything works, but Preview changes throws 403.

      Log:

      2020-01-20 10:50:35,574 [MODEL] [http-nio-8080-exec-3] TRACE (com.evolveum.midpoint.security.api.SecurityUtil): Denied access to FilterInvocation: URL: /admin/previewChanges?3 by X000005 : Not authorized; one of the following authorization actions is required: [http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#usersAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#user, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#rolesAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#role, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#orgAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#orgUnit, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#servicesAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#service, http://midpoint.evolveum.com/xml/ns/public/security/authorization-3#guiAll, http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#all]
      

      The user does NOT have any of the mentioned authz and will not have them. Why Preview page wants them?

      Authorizations are attached.

      Attachments

        Activity

          People

            vix Ivan Noris
            vix Ivan Noris
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: