View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0009043 | 10000-005: Information Model | Spec | public | 2023-07-12 14:41 | 2024-03-26 16:49 |
Reporter | Matthias Damm | Assigned To | Jeff Harding | ||
Priority | normal | Severity | feature | Reproducibility | have not tried |
Status | closed | Resolution | fixed | ||
Product Version | 1.05.02 | ||||
Fixed in Version | 1.05.04 RC1 | ||||
Summary | 0009043: Introduce an optional CurrentRoleIds property on SessionDiagnosticObjectType | ||||
Description | We have currently no way to find out which roles the server assigned to a session. This makes it extremely difficult to analyze permission issues if it is not even known what the server is using to check permissions on nodes. This would be best as part of SessionSecurityDiagnostics but it is not possible to extend the structure and related variable type. But it would be possible to add an optional property to SessionDiagnosticObjectType. It should have the same restrictions like we have defined for SessionSecurityDiagnostics. Profiles should make this optional property mandatory if the server supports Role based Security. | ||||
Additional Information | It would be also usefull as additional event field on the ActivateSession audit event. Not sure if we should also add a new audit event for role changes. The list of assigned roles may also change without ActivateSession e.g. if the IdentityMapping of a role changes. | ||||
Tags | No tags attached. | ||||
Commit Version | 1.05.04 RC | ||||
Fix Due Date | 2023-10-30 | ||||
|
The Node CurrentRoleIds should be readable for the own session independent of the RolePermissions because there is no Role that can reflect that kind of permission required. |
|
Added suggested optional property to SessionDiagnosticObjectType and to AuditActivateSessionEventType |
|
Added optional property and conformance unit for the optional property. |
|
Agreed to changes edited in Web Meeting. |
Date Modified | Username | Field | Change |
---|---|---|---|
2023-07-12 14:41 | Matthias Damm | New Issue | |
2023-07-18 07:04 | Matthias Damm | Additional Information Updated | |
2023-07-25 15:22 | Jim Luth | Assigned To | => Jeff Harding |
2023-07-25 15:22 | Jim Luth | Status | new => assigned |
2023-07-25 15:23 | Jim Luth | Commit Version | => 1.05.04 RC |
2023-07-25 15:23 | Jim Luth | Fix Due Date | => 2023-10-30 |
2023-10-18 13:19 | Matthias Isele | Note Added: 0020212 | |
2024-01-17 08:29 | Matthias Damm | Description Updated | |
2024-01-18 21:09 | Jeff Harding | Note Added: 0020665 | |
2024-01-18 21:31 | Jeff Harding | Status | assigned => resolved |
2024-01-18 21:31 | Jeff Harding | Resolution | open => fixed |
2024-01-18 21:31 | Jeff Harding | Fixed in Version | => 1.05.04 RC1 |
2024-01-18 21:31 | Jeff Harding | Note Added: 0020666 | |
2024-03-26 16:49 | Jim Luth | Status | resolved => closed |
2024-03-26 16:49 | Jim Luth | Note Added: 0021041 |