Uploaded image for project: 'OpenIDM'
  1. OpenIDM
  2. OPENIDM-11270

Map empty privilege filters as true rather than filter them out

    Details

      Description

      PrivilegeQueryFilterCombiner#visitQueryRequest currently filters for only non-empty privilege filters. The recommendation is that instead of filtering out empty privilege filter, they should be mapped as true. Some justification behind this is the below scenario Jon shared:

       

      queryFilter=true AND (dept = engineering)
      
      priv=dept=engineering
      priv=dept=engineering, priv=(no filter)
      queryFilter=true AND (dept = engineering OR true)
      

       

      with the idea being that if there is one privilege filter that is empty and we ignore it instead of map to true, that the below scenario evaluates incorrectly.

      queryFilter=true AND (dept = engineering) - evaluating to true AND false if the dept == engineering filter is false
      
      queryFilter=true AND (dept = engineering OR true) - evaluating to true AND true if the dept == engineering filter is false
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                katie.gonzalez Katie Gonzalez
                Reporter:
                katie.gonzalez Katie Gonzalez
                QA Assignee:
                Garyl Erickson
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: