Return-Path: X-Original-To: apmail-sling-dev-archive@www.apache.org Delivered-To: apmail-sling-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 13C4F10594 for ; Wed, 9 Oct 2013 12:34:58 +0000 (UTC) Received: (qmail 39333 invoked by uid 500); 9 Oct 2013 12:34:44 -0000 Delivered-To: apmail-sling-dev-archive@sling.apache.org Received: (qmail 39101 invoked by uid 500); 9 Oct 2013 12:34:43 -0000 Mailing-List: contact dev-help@sling.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@sling.apache.org Delivered-To: mailing list dev@sling.apache.org Received: (qmail 39048 invoked by uid 99); 9 Oct 2013 12:34:42 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Oct 2013 12:34:42 +0000 Date: Wed, 9 Oct 2013 12:34:42 +0000 (UTC) From: "Antonio Sanso (JIRA)" To: dev@sling.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Issue Comment Deleted] (SLING-3143) CreateUserServlet.createUser doesn't work on Oak for UserAdmin group members MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/SLING-3143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Antonio Sanso updated SLING-3143: --------------------------------- Comment: was deleted (was: While I do not like too much this feature of having a special group configured via osgi that skips ACLs it seems that is a feature of Sling. I will attach a patch that would create those groups on demand (only for the tests). [~bdelacretaz] WDYT?) > CreateUserServlet.createUser doesn't work on Oak for UserAdmin group members > ---------------------------------------------------------------------------- > > Key: SLING-3143 > URL: https://issues.apache.org/jira/browse/SLING-3143 > Project: Sling > Issue Type: Bug > Reporter: Bertrand Delacretaz > Assignee: Bertrand Delacretaz > Priority: Minor > Attachments: SLING-3143-forceAdminSession.patch > > > CreateUserServlet.createUser detects if the current user is a member of the UserAdmin group (group name is configurable), and if that's the case considers the user as admin and uses its session to create a new user. > This fails on Oak, our launchpad/integration-tests CreateUserTest fails. > I'll attach a patch that works around the problem by forcing the use of an admin session in this case, but I'm not sure if it's the right thing to do, I'll discuss on the dev list. -- This message was sent by Atlassian JIRA (v6.1#6144)