Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Same audience is incorrectly assigned to roles with similar names when retrieving user #17909

Closed
shashimalcse opened this issue Nov 18, 2023 · 1 comment

Comments

@shashimalcse
Copy link
Contributor

Describe the issue:
When retrieving the roles of a user, the same audience is incorrectly assigned to roles with similar names.

How to reproduce:

  • Crete a user
  • Create role with organization audience and assign to user
  • Create role with application audience with similar name and assign to user
  • Try to retrieve the user
curl 'https://localhost:9443/t/carbon.super/scim2/Users/<user-id> \
  -H 'Access-Control-Allow-Origin: https://localhost:9443/t/carbon.super/console' \
  -H 'Accept: application/json, text/plain, */*' \
  -H 'Referer;' \
  -H 'Authorization: Bearer <token>' \
  -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36' \
  --compressed \
  --insecure
Screenshot 2023-11-18 at 15 52 22

Expected behavior:
The correct audience value should have been assigned to the user's role.

Environment information (Please complete the following information; remove any unnecessary fields) :

  • Product Version: [e.g., IS 5.10.0, IS 5.9.0]
  • OS: [e.g., Windows, Linux, Mac]
  • Database: [e.g., MySQL, H2]
  • Userstore: [e.g., LDAP, JDBC]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

No branches or pull requests

4 participants