View Issue Details

IDProjectCategoryView StatusLast Update
000904310000-005: Information ModelSpecpublic2024-03-26 16:49
ReporterMatthias Damm Assigned ToJeff Harding  
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.05.02 
Fixed in Version1.05.04 RC1 
Summary0009043: Introduce an optional CurrentRoleIds property on SessionDiagnosticObjectType
Description

We have currently no way to find out which roles the server assigned to a session. This makes it extremely difficult to analyze permission issues if it is not even known what the server is using to check permissions on nodes.

This would be best as part of SessionSecurityDiagnostics but it is not possible to extend the structure and related variable type.

But it would be possible to add an optional property to SessionDiagnosticObjectType. It should have the same restrictions like we have defined for SessionSecurityDiagnostics.
The proposed name for the property is 'CurrentRoleIds'.
The DataType would be an array of NodeIds.

Profiles should make this optional property mandatory if the server supports Role based Security.

Additional Information

It would be also usefull as additional event field on the ActivateSession audit event.

Not sure if we should also add a new audit event for role changes. The list of assigned roles may also change without ActivateSession e.g. if the IdentityMapping of a role changes.

TagsNo tags attached.
Commit Version1.05.04 RC
Fix Due Date2023-10-30

Activities

Matthias Isele

2023-10-18 13:19

reporter   ~0020212

The Node CurrentRoleIds should be readable for the own session independent of the RolePermissions because there is no Role that can reflect that kind of permission required.

Jeff Harding

2024-01-18 21:09

developer   ~0020665

Added suggested optional property to SessionDiagnosticObjectType and to AuditActivateSessionEventType

Jeff Harding

2024-01-18 21:31

developer   ~0020666

Added optional property and conformance unit for the optional property.

Jim Luth

2024-03-26 16:49

administrator   ~0021041

Agreed to changes edited in Web Meeting.

Issue History

Date Modified Username Field Change
2023-07-12 14:41 Matthias Damm New Issue
2023-07-18 07:04 Matthias Damm Additional Information Updated
2023-07-25 15:22 Jim Luth Assigned To => Jeff Harding
2023-07-25 15:22 Jim Luth Status new => assigned
2023-07-25 15:23 Jim Luth Commit Version => 1.05.04 RC
2023-07-25 15:23 Jim Luth Fix Due Date => 2023-10-30
2023-10-18 13:19 Matthias Isele Note Added: 0020212
2024-01-17 08:29 Matthias Damm Description Updated
2024-01-18 21:09 Jeff Harding Note Added: 0020665
2024-01-18 21:31 Jeff Harding Status assigned => resolved
2024-01-18 21:31 Jeff Harding Resolution open => fixed
2024-01-18 21:31 Jeff Harding Fixed in Version => 1.05.04 RC1
2024-01-18 21:31 Jeff Harding Note Added: 0020666
2024-03-26 16:49 Jim Luth Status resolved => closed
2024-03-26 16:49 Jim Luth Note Added: 0021041