Kuali Rice Development
  1. Kuali Rice Development
  2. KULRICE-4177

Improve error handling on person doc when checking permissions for adding roles

    Details

    • Type: Bug Fix Bug Fix
    • Status: Closed Closed
    • Priority: Major Major
    • Resolution: Cannot Reproduce
    • Affects Version/s: None
    • Fix Version/s: 1.0.3
    • Component/s: Development
    • Labels:
      None
    • Similar issues:
      KULRICE-3236Improve handling of person lookups when role is involved
      KULRICE-10454Improve handling of the binding errors
      KULRICE-7632Improve exception handling in RoleServiceImpl#principalHasRole related to role type services
      KULRICE-12828Adding a Role to a Person doc pollutes the log with secure field errors
      KULRICE-6809Permission lookup does not return value when adding permission to Role
      KULRICE-6463New DB Indexes for KIM Permission checks
      KULRICE-4603Person: Cannot use hyphenated last name on the Person doc - receive error that only letters or digits may be used. Also prevents the addition of roles if a person comes into KIM via LDAP with a hyphen.
      KULRICE-7185Optimization of KIM Permission Checks
      KULRICE-9426Ad Hoc to Person unauthroized to take action on document possible
      KULRICE-4677Person/Group/Role/Permission/Responsibility update screen Save/Submit enhancements
    • Rice Module:
      KIM
    • Application Requirement:
      KFS

      Description

      If you try to add a role on a person using the role # instead of using the lookup you get an error at the bottom of the page when you click "add":
      Not Authorized to assign role null null.

      I'm sure this is because it's trying to figure out if I have permission to add the role I've selected but hasn't figured out the namespace yet. It would be great if we could figure out a way for it to find the namespace before doing this check.

      At a minimum the error should be moved to the membership tab.

        Issue Links

          Activity

          Hide
          Ge Zhang (Inactive) added a comment -

          Tried to repeat this by editing an existing person and by creating a new person, but can not repeat it, what I can see is the role can be added to a person doc by directly filling in a role number
          if the role can not be added(for example a derived role), the error message is shouwn on the membership tab.

          I guess this issue might be resolved by recent fix, please let me know if yo have any concerns. thanks

          Show
          Ge Zhang (Inactive) added a comment - Tried to repeat this by editing an existing person and by creating a new person, but can not repeat it, what I can see is the role can be added to a person doc by directly filling in a role number if the role can not be added(for example a derived role), the error message is shouwn on the membership tab. I guess this issue might be resolved by recent fix, please let me know if yo have any concerns. thanks
          Hide
          Ge Zhang (Inactive) added a comment -

          feel free to re-open it if this is still a problem

          Show
          Ge Zhang (Inactive) added a comment - feel free to re-open it if this is still a problem
          Hide
          Damon Dorsey added a comment -

          I confirmed that this can't be reproduced in KFS CNV, so I'm closing.
          thanks!
          Damon

          Show
          Damon Dorsey added a comment - I confirmed that this can't be reproduced in KFS CNV, so I'm closing. thanks! Damon

            People

            • Assignee:
              Ge Zhang (Inactive)
              Reporter:
              Dan Lemus (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                Remaining Estimate - 1 day
                1d
                Logged:
                Time Spent - Not Specified
                Not Specified

                  Structure Helper Panel