Closed phavekes closed 2 days ago
Fixed in: https://github.com/OpenConext/Stepup-Middleware/pull/271 (Michiel Kodde - Mar 5, 2019)
The same issue was instroduced for the ra-second-factor controller: Fixed in: https://github.com/OpenConext/Stepup-Middleware/pull/272 (bstrooband - Mar 5, 2019)
Verified that a user with in RA role in an institution because of a use_ra can vet a user from that institution (Pieter van der Meulen - May 1, 2019)
This issue is imported from pivotal - Originaly created at Mar 5, 2019 by Michiel Kodde
A user with an implicit RA role for an institution is now unable to find the verified second factor associated with an activation code. This because the Middleware filters on the RAA role instead of the RA role in
\Surfnet\StepupMiddleware\ApiBundle\Controller\VerifiedSecondFactorController::collectionAction
This problem was identified while fixing the behat tests.