View Issue Details

IDProjectCategoryView StatusLast Update
000981810000-018: Role-Based SecuritySpecpublic2024-09-26 11:46
ReporterMatthias Isele Assigned ToMatthias Damm  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.05.04 RC1 
Fixed in Version1.05.04 
Summary0009818: Behaviour of UserManagementType RemoveUser not defined
Description

What is the expected behaviour in the server if a user that is currently used (active session) is removed.
My expectation is that the server should close the session immediately.

A similar szenario is described in Part 12 ApplyChanges:
If a TrustList change only affects UserIdentity associated with a Session then Servers shall reevaluate the UserIdentity and if it is no longer valid the Session and associated Subscriptions are closed.

For me the logic for a X509 token that is no longer trusted and a user that no longer exists should be the same.

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Matthias Damm

2024-09-24 08:33

developer   ~0021793

Agreed in F2F meeting to close the sessions of the user.
Check text for remove/add identity from Role

Matthias Damm

2024-09-26 09:20

developer   ~0021807

For RoleType added the following sentence:
If the configuration of a Role is changed, the Role assignment to active Session shall be re-evaluated.

For ModifyUser added the following sentence:
If the UserConfiguration bit Disabled is changed to TRUE and the modified user is associated with a Session then Servers shall close the Session and associated Subscriptions.

For RemoveUser added the following sentence:
If the removed user is associated with a Session then Servers shall close the Session and associated Subscriptions.

Jim Luth

2024-09-26 11:46

administrator   ~0021816

Agreed to changes edited in F2F.

Issue History

Date Modified Username Field Change
2024-09-05 12:42 Matthias Isele New Issue
2024-09-24 08:32 Matthias Damm Assigned To => Matthias Damm
2024-09-24 08:32 Matthias Damm Status new => assigned
2024-09-24 08:33 Matthias Damm Note Added: 0021793
2024-09-26 09:20 Matthias Damm Status assigned => resolved
2024-09-26 09:20 Matthias Damm Resolution open => fixed
2024-09-26 09:20 Matthias Damm Fixed in Version => 1.05.04
2024-09-26 09:20 Matthias Damm Note Added: 0021807
2024-09-26 11:46 Jim Luth Status resolved => closed
2024-09-26 11:46 Jim Luth Note Added: 0021816