-
Suggestion
-
Resolution: Unresolved
-
None
ApplicationService.isUserAuthorised(Application application, String username) checks if the user belongs to a authenticating group for the application. Extract this functionality from ApplicationService to a separate class/interface.
Clean up includes removing the CachingApplicationService class, and providing a no-cache implementation of the user authorisation class for JIRA and Confluence to use.
Change will break JIRA and Confluence when they upgrade to the next milestone.
Attached: CWD-2193-a.patch
Contains:
-Splitting UserAuthenticationService from ApplicationService.
-Creating the Translatingxxx and Cachingxxx on the same model as ApplicationService.
-Changing the Spring files to reflect this modification.
Left to do:
-Remove CachingApplicationService.
-In ApplicationServiceTestCase and inheriting classes, the tests related to authentication and authorization should be moved to another test file inheriting from UserAuthenticationService.
-TokenAuthenticationManagerImplTest is only testing authentication, so it doesn't need 'applicationService'. Does TokenAuthenticationManagerImpl need 'applicationService' then?
-We need to check the change is ok for Confluence and Jira.