search

strongloop / loopback-example-access-control

An example demonstrating LoopBack access control mechanisms.
Other
370 stars 168 forks source link

I don't understand the relation between user and Roles #81

Closed emazzu closed 7 years ago

emazzu commented 8 years ago

Hi, how are you !!!

I send a project, can you take a look ?

a.tar.gz

table user image

table role image

table roleMapping image

table ACL image

my english is very poor, excuse me !!!

I need know, if I need some table more ? when a log in with emazzu6 user, the role masterWells, i have not effect !!! it is my problem !!!

1 $unauthenticated works good !!!

2 with log in emazzu6

The user is OK, the role is OK: masterWells, but it says Role Mapping found: null and isRole() false.

What can be ??? some idea ??

$unauthenticated loopback:security:access-context ttl 1209600 +0ms loopback:security:access-context getUserId() 11 +0ms loopback:security:access-context isAuthenticated() true +0ms loopback:security:role isInRole(): $everyone +2ms loopback:security:access-context ---AccessContext--- +0ms loopback:security:access-context principals: +0ms

loopback:security:access-context principal: {"type":"USER","id":11} +0ms

loopback:security:access-context modelName User +0ms loopback:security:access-context modelId undefined +0ms loopback:security:access-context property count +1ms loopback:security:access-context method count +0ms loopback:security:access-context accessType READ +4ms loopback:security:access-context accessToken: +3ms loopback:security:access-context id "FF9SRNxSw1ThwFs83jfsWWDasJL3gCW98T0QvAe3GLGwCaoWl3fPzCpW33xr1l3N" +0ms loopback:security:access-context ttl 1209600 +0ms loopback:security:access-context getUserId() 11 +0ms loopback:security:access-context isAuthenticated() true +0ms loopback:security:role Custom resolver found for role $everyone +0ms

loopback:security:role Role found: {"id":5,"name":"masterWells","description":"Access to Master Wells","created":null,"modified":null} +327ms

loopback:security:role Role mapping found: null +335ms loopback:security:role isInRole() returns: false +1ms

loopback:security:acl The following ACLs were searched: +0ms loopback:security:acl ---ACL--- +0ms loopback:security:acl model User +0ms loopback:security:acl property * +0ms loopback:security:acl principalType ROLE +0ms loopback:security:acl principalId $everyone +0ms loopback:security:acl accessType * +1ms loopback:security:acl permission DENY +0ms loopback:security:acl with score: +0ms 7495 loopback:security:acl ---Resolved--- +0ms loopback:security:access-context ---AccessRequest--- +0ms loopback:security:access-context model User +0ms loopback:security:access-context property count +0ms loopback:security:access-context accessType READ +0ms loopback:security:access-context permission DENY +0ms loopback:security:access-context isWildcard() false +1ms

Regards Eduardo

stale[bot] commented 7 years ago

This issue has been closed due to continued inactivity. Thank you for your understanding. If you believe this to be in error, please contact one of the code owners, listed in the CODEOWNERS file at the top-level of this repository.