Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-2527

findAuthorizedPerformanceOptimize=true doesn't read collections of special groups

    Details

    • Type: Bug
    • Status: Code Review Needed (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 5.0
    • Fix Version/s: None
    • Component/s: DSpace API
    • Labels:
      None
    • Attachments:
      0
    • Comments:
      6
    • Documentation Status:
      Not Required

      Description

      UPDATED DESCRIPTION:

      This is related to DS-682. When org.dspace.content.Collection.findAuthorizedPerformanceOptimize=true in your dspace.cfg, permissions applied to special groups (especially via LDAP or Shibboleth) are ignored.

      Unfortunately, the "findAuthorizedPerformanceOptimize" feature assumes that all group memberships are contained in the database. This is not the case when using special groups (whose membership is determined dynamically, often using LDAP or Shibboleth or similar).

      ORIGINAL DESCRIPTION:
      After activating Shibboleth Authentication in Dspace, we have some problems with the special groups not being read, when submitting to a collection that has that group.

      Example:

      1 - The group staff is created and added to a collection.
      2 - After Shibboleth authentication, a user has the staff group associated (comes from IdP).
      3 - When the option "Submit to collection is selected"no collection appears, saying "You are not authorized to submit to any collections", even when exists a group exists and is associated with a collection .
      We think that the problem lies in the JSPSelectCollectionStep.java, maybe lacking the code to read the special groups that comes from the IdP data.

      I know we don't give much detail, but we can provide access to our dspace installation (if needed) to reproduce the error.

      Thanks,
      Fernando Ribeiro.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                fribeiro Fernando Ribeiro
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated: