Bug #54589

Role parent is not removed from roles MM table

Added by Andreas Wolf over 1 year ago.

Status:New Start date:2013-12-24
Priority:Should have Due date:
Assigned To:- % Done:

0%
Category:Security
Target version:-
PHP Version: Complexity:
Has patch:No Affected Flow version:(any)

Description

When removing a parent role from Policy.yaml, this change is not reflected in the table typo3_flow_security_policy_role_parentroles_join if there are no parent roles for this role anymore.

How to test:

  1. Add a role with two parent roles to the table, run some action
  2. check typo3_flow_security_policy_role_parentroles_join for the inheritance: there should be two entries in it
  3. remove one of the parent roles, run some action
  4. check typo3_flow_security_policy_role_parentroles_join: one entry should have gone
  5. remove the other parent role, run some action
  6. check typo3_flow_security_policy_role_parentroles_join: the entry is still there, but should be gone.

Note: the affected Flow version is 2.1, but I cannot select this because the entry is missing.

Also available in: Atom PDF