search

OpenConext / OpenConext-pdp

OpenConext implementation of a XACML based PDP engine for access policy enforcement
Apache License 2.0
8 stars 8 forks source link

dev to prod migration results in hard to diagnose errors #4

Open mrvanes opened 8 years ago

mrvanes commented 8 years ago

When PDP server is tested in spring.profiles.active=dev mode, the database is filled with test rules, referring to test IdP's and SP's but in this mode changes do not persists server restarts. Once changed to prod, these policies remain, but are checked against the real metadata export from SR. This results in a hard to diagnose "Something went wrong when opening this page." Maybe a more graceful acceptance of unresolvable entityID's could relieve this pain for admins that try to bootstrap PDP (manually).

tvdijen commented 6 years ago

I should totally read up on open issues before playing around with this stuff :D I didn't get a "something went wrong" message, just an empty policy overview.. After removing all test-entities from the database, my new policy showed up in the overview.