search

Unicon / googleapps-grouper-provisioner

This project is an Internet2 Grouper connector that synchronizes Grouper groups and users to Google Apps.
Apache License 2.0
6 stars 5 forks source link

Manage privs not given properly. #17

Closed jtgasper3 closed 9 years ago

jtgasper3 commented 9 years ago

Andy reported an issue where someone with admin privs was given the "manage" role while the provisioner config was set to update.

During discovery we also found that the Change Log Consumer wasn't setting the priv appropriately at all.

jtgasper3 commented 9 years ago
  1. Added check against Grouper API where !hasAdmin in the case that the config uses update.
  2. Found a spot that used the original hard coded privilege in the CLC. It now uses the priv calculation function.
jtgasper3 commented 9 years ago

PR #18 applied to 1.0.X and patched into master.