Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-22360

SPI cache for roles not updated when moving user to different group in legacy

    Details

      Description

      User role/permissions are not updated in Symfony after assigning the user object to a different group, through legacy Admin UI.

      steps to reproduce:
      • optional: create a custom 'testmodule' module with a 'testfunc' function

        Module = array( 'name' => 'eZ Test' );
        $FunctionList = array(
            'testfunc'    => array()
        );
        

      • optional: create a custom controller view to verify access and configure necessary routing. sample code:

                public function testAction( )
                {
                    $grantStr = $this->getRepository()->hasAccess( 'testmodule', 'testfunc' ) ? 'granted' : 'NOT granted';
                    return new Response( 'Access to testmodule/testfunc is: ' . $grantStr );
                }
        

      1. In the backoffice, grant this policy to the 'editors' role and save.
      2. In the frontend login as editor, access the view configured above.
        1. Verify that response is: "Access to testmodule/testfunc is: granted"
      3. In the backoffice, move the editor user to the 'Anonymous group'
        1. In the frontend refresh the page: response is still granted.
      4. Clear cache in admin backoffice
        1. frontend response is now "NOT granted"

      The same problem exists when assigning back to a group with permissions.

        Issue Links

          Activity

          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open Confirmed Confirmed
          4m 25s 1 joao.inacio@ez.no 17/Feb/14 6:51 PM
          Confirmed Confirmed InputQ InputQ
          15h 12m 1 Gunnstein Lye 18/Feb/14 10:03 AM
          Development Development Documentation Review done Documentation Review done
          15s 1 jerome.vieilledent@ez.no 19/Feb/14 11:04 AM
          QA QA InputQ InputQ
          37m 46s 1 Marcos Loureiro (Inactive) 19/Feb/14 5:24 PM
          InputQ InputQ Development Development
          3d 1h 42m 2 yannick.roger@ez.no 21/Feb/14 6:06 PM
          Development Development Development Review Development Review
          7s 1 yannick.roger@ez.no 21/Feb/14 6:06 PM
          Development Review Development Review Development Review done Development Review done
          2d 15h 50m 1 yannick.roger@ez.no 24/Feb/14 9:56 AM
          Development Review done Development Review done Documentation Review done Documentation Review done
          6s 1 yannick.roger@ez.no 24/Feb/14 9:56 AM
          Documentation Review done Documentation Review done QA QA
          7h 6m 2 Marcos Loureiro (Inactive) 24/Feb/14 11:21 AM
          QA QA Closed Closed
          1d 27m 1 Marcos Loureiro (Inactive) 25/Feb/14 11:48 AM
          Closed Closed Reopened Reopened
          18d 6h 59m 1 Petar Spanja (Inactive) 15/Mar/14 6:48 PM
          Reopened Reopened Closed Closed
          1s 1 Petar Spanja (Inactive) 15/Mar/14 6:48 PM

            People

            • Assignee:
              Unassigned
              Reporter:
              Joao Inacio (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 hours, 20 minutes
                4h 20m