search

Arachne / Security

Authentication and authorization for Nette framework. Deals with cases that are difficult to implement with nette/security.
MIT License
2 stars 7 forks source link

Each subsequent isAllowed call PermissionAuthorizator adds new __authenticated role. #8

Closed josefsabl closed 5 years ago

josefsabl commented 5 years ago

Pull request here:

https://github.com/Arachne/Security/pull/7

enumag commented 5 years ago

The $roles with '__authenticated' should never be written back to Identity. How did that happen?

josefsabl commented 5 years ago

Ok, probably something wrong on my side. I will take look at it.

josefsabl commented 5 years ago

I confirm this was a bug on our side. We were passing roles from our data object to identity as a reference (sort of).