[jira] [Commented] (SLING-3143) CreateUserTest fails on Oak: CreateUserServlet.createUser doesn't work for UserAdmin group members

["Felix Meschberger (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-3143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13812707#comment-13812707 ] 

Felix Meschberger commented on SLING-3143:
------------------------------------------

I don't think this is a reasonable patch: The assumption is that the configured group name is such that members of that group are allowed to manage users which includes creation of users. If this is not the case, then either configuration is wrong or setup of the group is wrong.

> CreateUserTest fails on Oak: CreateUserServlet.createUser doesn't work for UserAdmin group members
> --------------------------------------------------------------------------------------------------
>
>                 Key: SLING-3143
>                 URL: https://issues.apache.org/jira/browse/SLING-3143
>             Project: Sling
>          Issue Type: Bug
>            Reporter: Bertrand Delacretaz
>            Assignee: Bertrand Delacretaz
>            Priority: Minor
>         Attachments: SLING-3143-forceAdminSession.patch
>
>
> CreateUserServlet.createUser detects if the current user is a member of the UserAdmin group (group name is configurable), and if that's the case considers the user as admin and uses its session to create a new user.
> This fails on Oak, our launchpad/integration-tests CreateUserTest fails.
> I'll attach a patch that works around the problem by forcing the use of an admin session in this case, but I'm not sure if it's the right thing to do, I'll discuss on the dev list.



--
This message was sent by Atlassian JIRA
(v6.1#6144)