[jira] Closed: (SLING-1067) User manager servlet does not allow administrative users to add new users.

["Ian Boston (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SLING-1067?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ian Boston closed SLING-1067.
-----------------------------


Fixed,

The CreateUserServlet now checks to see if the user connected to the session connected to the resource is an administrator. If the user is an administrator, they are allows to create new users.

> User manager servlet does not allow administrative users to add new users.
> --------------------------------------------------------------------------
>
>                 Key: SLING-1067
>                 URL: https://issues.apache.org/jira/browse/SLING-1067
>             Project: Sling
>          Issue Type: Bug
>          Components: Servlets Post
>    Affects Versions: JCR Jackrabbit User Manager 2.0.2
>            Reporter: Ian Boston
>            Assignee: Ian Boston
>             Fix For: JCR Jackrabbit User Manager 2.0.4
>
>
> If selfRegistrationEnabled is false (set by configuration property self.registration.enabled=false), no one, not even administrators can create users over rest.
> Is this a bug ?
> Should an administrator be able to create a user using the CreateUserServlet?

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.