[jira] [Commented] (GUACAMOLE-1021) Top level organizational level of connection group repeated when user is in two groups that contain different hosts

["Mike Jumper (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-1021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17209312#comment-17209312 ] 

Mike Jumper commented on GUACAMOLE-1021:
----------------------------------------

This is due to the way the {{JOIN}} is used when narrowing results by granted permissions. Before support for user groups was added, there really could only be one permission for each relevant object and user pairing, so the {{JOIN}} had the intended effect of only restricting the results. Now that a user may inherit permissions from multiple sources (the user object and any number of user groups), that {{JOIN}} will effectively duplicate accessible objects if the user inherits access to that object multiple ways.

> Top level organizational level of connection group repeated when user is in two groups that contain different hosts
> -------------------------------------------------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1021
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1021
>             Project: Guacamole
>          Issue Type: Bug
>          Components: guacamole
>            Reporter: Jason Keltz
>            Assignee: Mike Jumper
>            Priority: Minor
>             Fix For: 1.3.0
>
>
> A user is in two groups that refer to the same organizational level of the connection group, and different hosts underneath.  The system displays the title of the organization level twice - one of them is greyed out, and the other can be used.  When the user has access to the same organizational level in both groups, only one group should be displayed.
> One connection group top-level is created called "Connect with SSH" which contains 4 hosts.
> Group1 contains the top-level "Connect with SSH" and two of the hosts.
> Connect with SSH
>  * Host 1
>  * Host 2
> Group 2 contains the top-level "Connect with SSH" and the other two hosts.
>  * Host 1
>  * Host 2
> A user in both groups sees:
> + Connect with SSH (greyed out, not selectable)
> + Connect with SSH
>  * Host 1
>  * Host 2
>  * Host 3
>  * Host 4
> Expected Behaviour: User sees "Connect with SSH" only one time.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)