Crowd gives more admin permissions than is apparent

XMLWordPrintable

    • Severity 3 - Minor

      When a crowd application has multiple directories added to it, and a group which is authorised to log into Crowd, all directories with that group are allowed to log in to crowd. However, the UI makes it seem as though only a group in the chosen directory is allowed to log in.

      Steps to reproduce:

      • Add multiple directories to the crowd application "dir1", "dir2".
      • Add a group to both directories with the same name "group"
      • Add a user "test" to "dir2" with group "group".
      • Add the group "group" from "dir1" to have access to crowd.
      • Log in via user "test"

      Result:
      "test" user can log in.

      Expected:
      "test" user does not have permissions to log in.

              Assignee:
              Unassigned
              Reporter:
              Sunny Kalsi [Atlassian]
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: