search

cloudogu / sonar-cas-plugin

CAS Authentication support for SonarQube
14 stars 8 forks source link

fix empty cas group replication #34

Closed cbeyer42 closed 3 years ago

cbeyer42 commented 3 years ago

If CAS doesn't provide any groups the local groups in SonarQube won't be updated but sometimes it's intended to remove all groups from an user.

To achieve this goal the group replication needs to be configurable so you can decide which application should manage the groups.

Steps to reproduce the faulty behaviour:

  1. Have user with exactly one group (namely the admin group)
  2. login user
  3. logout user
  4. remove the admin group from the user so there no more groups associated with the user
  5. login user
  6. User still has admin privileges
ppxl commented 3 years ago

This bug was introduced with PR #24

ppxl commented 3 years ago

A new sonar.properties entry of sonar.cas.groupReplication = CAS should be set if full CAS group replication is desired.