OpenConext / Stepup-Middleware

Stepup Middleware
Apache License 2.0
3 stars 2 forks source link

As a RA I should be able to search for verified second factor by activation code #480

Closed phavekes closed 2 days ago

phavekes commented 2 days ago

This issue is imported from pivotal - Originaly created at Mar 5, 2019 by Michiel Kodde

A user with an implicit RA role for an institution is now unable to find the verified second factor associated with an activation code. This because the Middleware filters on the RAA role instead of the RA role in \Surfnet\StepupMiddleware\ApiBundle\Controller\VerifiedSecondFactorController::collectionAction

This problem was identified while fixing the behat tests.

phavekes commented 2 days ago

Fixed in: https://github.com/OpenConext/Stepup-Middleware/pull/271 (Michiel Kodde - Mar 5, 2019)

phavekes commented 2 days ago

The same issue was instroduced for the ra-second-factor controller: Fixed in: https://github.com/OpenConext/Stepup-Middleware/pull/272 (bstrooband - Mar 5, 2019)

phavekes commented 2 days ago

Verified that a user with in RA role in an institution because of a use_ra can vet a user from that institution (Pieter van der Meulen - May 1, 2019)