Uploaded image for project: 'OpenIDM'
  1. OpenIDM
  2. OPENIDM-14468

Delegated Admin access on array attributes

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 6.5.0.2
    • Fix Version/s: 6.5.0.4
    • Component/s: Module - Roles
    • Labels:
    • Target Version/s:
    • Verified Version/s:
    • Support Ticket IDs:

      Description

      When performing a PATCH request on an Array property via Delegated Admin, the request removes all values from the array property & replaces with those in the request payload, rather than appending the new value to the list of current array values.

      Steps to reproduce - 
      Add Array property to Managed User
      Create Role & assign privileges to the MU Array property

      A CURL PATCH request as the Delegated Admin - 

      --data-raw '[   {       "operation": "add",       "field": "/testArray/-",       "value": [ "Array2" ]   },   {       "operation": "increment",       "field": "test",       "value": 100   }]'

      Returns - 

      {   "code": 403,   "detail": {       "failedPrivilegeRequirements": [           [               {                   "error": "No attribute level access",                   "property": "-"               }           ]       ]   },   "message": "No matching privileges found",   "reason": "Forbidden"}

      The CURL request is successful if the field is specified as - 

      "field": "testArray",

      However this removes the previous values & replaces with the new in the payload

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              brmiller Brendan Miller
              Reporter:
              becky.maund Becky Maund
              Votes:
              1 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: