[jira] [Updated] (OAK-8422) Deleted Users Not Removed From Group

["Jens Lauterbach (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OAK-8422?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jens Lauterbach updated OAK-8422:
---------------------------------
    Description: 
h1. Overview

When a user is created, added to a group, deleted and then re-created with the same userId (authorizableId) the user is assigned to the group he/she was assigned to before the user was deleted.
h1. Steps to Reproduce
 # Create group named "test".
 # Create user.
 # Add user to group.
 # Delete user.
 # Create user with same "userID" as in step 2.

Expected result:
 * User is not member of group "test".

Actual result:
 * User is member of group "test".

h1. Additional Information

I have created a unit test to demonstrate this problem. The unit test is in my fork of the repository and has detailed comments to explain what is going on:

[https://github.com/jenslauterbach/jackrabbit-oak/blob/OAK-8422/oak-core/src/test/java/org/apache/jackrabbit/oak/security/user/UserManagerImplTest.java#L453]

You can run the test as follows:
{code:java}
git clone -b OAK-8422 https://github.com/jenslauterbach/jackrabbit-oak.git
cd jackrabbit-oak
mvn test -DfailIfNoTests=false -Dtest=org.apache.jackrabbit.oak.security.user.UserManagerImplTest#testDanglingUserGroupMemberships{code}
This should run the unit test I have written and fail.

  was:
h1. Overview

When a user is created, added to a group, deleted and then re-created with the same userId (authorizableId) the user is assigned to the group he/she was assigned to before the user was deleted.
h1. Steps to Reproduce
 # Create group named "test".
 # Create user.
 # Add user to group.
 # Delete user.
 # Create user with same "userID" as in step 2.

Expected result:
 * User is not member of group "test".

Actual result:
 * User is member of group "test".

h1. Additional Information

I have created a unit test to demonstrate this problem. I will provide the link later.


> Deleted Users Not Removed From Group
> ------------------------------------
>
>                 Key: OAK-8422
>                 URL: https://issues.apache.org/jira/browse/OAK-8422
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>    Affects Versions: 1.16.0
>         Environment: Operating system: macOS 10.14.5
> Java: 
> {code:java}
> java version "1.8.0_191"
> Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
> Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)
> {code}
>            Reporter: Jens Lauterbach
>            Priority: Major
>
> h1. Overview
> When a user is created, added to a group, deleted and then re-created with the same userId (authorizableId) the user is assigned to the group he/she was assigned to before the user was deleted.
> h1. Steps to Reproduce
>  # Create group named "test".
>  # Create user.
>  # Add user to group.
>  # Delete user.
>  # Create user with same "userID" as in step 2.
> Expected result:
>  * User is not member of group "test".
> Actual result:
>  * User is member of group "test".
> h1. Additional Information
> I have created a unit test to demonstrate this problem. The unit test is in my fork of the repository and has detailed comments to explain what is going on:
> [https://github.com/jenslauterbach/jackrabbit-oak/blob/OAK-8422/oak-core/src/test/java/org/apache/jackrabbit/oak/security/user/UserManagerImplTest.java#L453]
> You can run the test as follows:
> {code:java}
> git clone -b OAK-8422 https://github.com/jenslauterbach/jackrabbit-oak.git
> cd jackrabbit-oak
> mvn test -DfailIfNoTests=false -Dtest=org.apache.jackrabbit.oak.security.user.UserManagerImplTest#testDanglingUserGroupMemberships{code}
> This should run the unit test I have written and fail.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)