-
Bug
-
Resolution: Obsolete
-
Low
-
None
-
None
-
None
Requesting the members of a group can return shadowed users. Where there is more than one directory containing a user, only the memberships defined in that user's actual directory should take effect. This functionality is implemented in CWD-3143 but not currently enabled in Crowd. There are a number of options:
- Unconditionally enable, although this could make group memberships queries slower in the case of uncached LDAP directories
- Detect the cases that could be slow and run the extra check otherwise
- Introduce more caching so the additional check is always fast
- Add a system setting to make this behaviour opt-in
[CWD-3187] Crowd can return shadowed users as part of membership queries
Workflow | Original: Simplified Crowd Development Workflow v2 - restricted [ 1509972 ] | New: JAC Bug Workflow v3 [ 3364874 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: Simplified Crowd Development Workflow v2 [ 1392605 ] | New: Simplified Crowd Development Workflow v2 - restricted [ 1509972 ] |
Workflow | Original: Crowd Development Workflow v2 [ 513768 ] | New: Simplified Crowd Development Workflow v2 [ 1392605 ] |
Resolution | New: Obsolete [ 11 ] | |
Status | Original: Open [ 1 ] | New: Resolved [ 5 ] |