-
Type:
Bug
-
Status: Resolved
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 6.0.0
-
Fix Version/s: 6.0.0
-
Component/s: API descriptor
-
Environment:Tomcat 8.0.46
OpenJDK Runtime Environment (build 1.8.0_151-8u151-b12-0ubuntu0.16.04.2-b12)
OpenAM 6.0.0-SNAPSHOT (175bf4afdf)
-
Target Version/s:
-
Needs backport:No
-
Needs QA verification:No
-
Functional tests:Yes
-
Are the reproduction steps defined?:Yes and I used the same an in the description
Bug description
Adding identity user to identity group via request is not working properly, it does nothing although it looks successful. The tests started to report this in Nightly Build from Mar/13, it works properly with milestone M7.
How to reproduce the issue
obtain token: curl -H "Accept-API-Version: protocol=2.0,resource=2.0" -H "Content-type: application/json" -H "X-OpenAM-Username: amAdmin" -H "X-OpenAM-Password: password" -X POST http://openam.example.com:8088/openam/json/realms/root/authenticate?realm=/ add user to group: curl -H "Content-type: application/json" -H "If-Match: *" -H "Accept-API-Version: protocol=2.0,resource=1.0" -X PUT --cookie "amlbcookie=01" --cookie "iPlanetDirectoryPro=TOKEN_ID" --data '{"uniqueMember": ["uid=policyAdmin,ou=People,dc=openam,dc=forgerock,dc=org"]}' http://openam.example.com:8088/openam/json/groups/policyAdmins
Expected behaviour
OpenAM 6.0.0-M7
{ "_id": "policyAdmins", "_rev": "1581369277", "cn": [ "policyAdmins" ], "dn": [ "cn=policyAdmins,ou=groups,dc=openam,dc=forgerock,dc=org" ], "objectclass": [ "top", "groupofuniquenames" ], "realm": "/", "uniqueMember": [ "uid=policyAdmin,ou=People,dc=openam,dc=forgerock,dc=org" ], "universalid": [ "id=policyAdmins,ou=group,dc=openam,dc=forgerock,dc=org" ], "username": "policyAdmins" }
User has been assigned to group.
Current behaviour
{ "_id": "policyAdmins", "_rev": "-223034725", "cn": [ "policyAdmins" ], "dn": [ "cn=policyAdmins,ou=groups,dc=openam,dc=forgerock,dc=org" ], "objectclass": [ "top", "groupofuniquenames" ], "realm": "/", "universalid": [ "id=policyAdmins,ou=group,dc=openam,dc=forgerock,dc=org" ], "username": "policyAdmins" }
User has NOT been assigned to group. Verified also in UI, that he is not part of the group. You can do that using UI with no problems.
- caused
-
OPENAM-12778 User can no longer log in AM if was removed from the privileges group
-
- Resolved
-