View Issue Details

IDProjectCategoryView StatusLast Update
000819410000-003: Address SpaceSpecpublic2023-12-04 19:17
ReporterRandy Armstrong Assigned ToJeff Harding  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.05.02 RC1 
Fixed in Version1.05.03 
Summary0008194: 4.8.2 Well Known Roles - Clarify what 'valid non-anonymous credentials' are.
Description

Spec needs to clarify what 'valid non-anonymous credentials' are.

If 'valid non-anonymous credentials' include a trusted client certificate then a client using the anonymous user credential would have access to the AuthenticatedUser Role.

If they don't then a client granted SecurityAdmin role via its certificate would not have access to the AuthenticatedUser Role unless it also provides a non-anonymous user token.

Neither scenario is intuitive and would likely lead to IOP issues.

TagsNo tags attached.
Commit Version1.05.03
Fix Due Date2023-11-07

Relationships

related to 0009301 closedMatthias Damm 10000-018: Role-Based Security 4.8.2 Well Known Roles - Clarify what 'valid non-anonymous credentials' are. 
related to 0009302 closedJeff Harding 10000-003: Address Space 4.8.2 Well Known Roles - Clarify what 'valid non-anonymous credentials' are. 

Activities

Jim Luth

2022-08-23 16:30

administrator   ~0017375

Proposal clarify that anonymous has no credential and is never authenticated and refer to "AuthenticatedUser Role" as the "Authenticated Role" and make it clear it is not always a User.

Jeff Harding

2022-09-21 19:44

developer   ~0017763

need to remove the term 'anonymous user' and use 'anonymous role'.

Randy Armstrong

2023-11-30 11:43

administrator   ~0020462

Updated to 4.9.1 to clarify that anonymous means no authentication at the user or application level.

Jim Luth

2023-12-04 19:17

administrator   ~0020480

Agreed to change edited in virtual F2F.

Issue History

Date Modified Username Field Change
2022-08-16 06:36 Randy Armstrong New Issue
2022-08-23 16:30 Jim Luth Note Added: 0017375
2022-08-23 16:30 Jim Luth Assigned To => Jeff Harding
2022-08-23 16:30 Jim Luth Status new => assigned
2022-09-21 19:44 Jeff Harding Note Added: 0017763
2022-09-21 19:48 Jeff Harding Target Version 1.05.02 => 1.05.03
2023-06-13 16:07 Jim Luth Target Version 1.05.03 =>
2023-07-25 16:25 Jim Luth Commit Version => 1.05.04 RC
2023-07-25 16:25 Jim Luth Fix Due Date => 2023-11-07
2023-11-30 11:43 Randy Armstrong Status assigned => resolved
2023-11-30 11:43 Randy Armstrong Resolution open => fixed
2023-11-30 11:43 Randy Armstrong Note Added: 0020462
2023-12-04 19:11 Jim Luth Commit Version 1.05.04 RC => 1.05.03
2023-12-04 19:12 Jim Luth Issue cloned: 0009301
2023-12-04 19:12 Jim Luth Relationship added related to 0009301
2023-12-04 19:15 Jim Luth Issue cloned: 0009302
2023-12-04 19:15 Jim Luth Relationship added related to 0009302
2023-12-04 19:17 Jim Luth Status resolved => closed
2023-12-04 19:17 Jim Luth Fixed in Version => 1.05.03
2023-12-04 19:17 Jim Luth Note Added: 0020480