Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 334114 - [user] Fix holes in the Orion authorization
Summary: [user] Fix holes in the Orion authorization
Status: RESOLVED WONTFIX
Alias: None
Product: Orion
Classification: ECD
Component: Server (show other bugs)
Version: unspecified   Edit
Hardware: All All
: P3 major (vote)
Target Milestone: ---   Edit
Assignee: Project Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 337582
Blocks:
  Show dependency tree
 
Reported: 2011-01-12 09:47 EST by Szymon Brandys CLA
Modified: 2015-05-05 14:46 EDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Szymon Brandys CLA 2011-01-12 09:47:25 EST 
This bug is raised to track fixing the Orion authorization.
Comment 1 Szymon Brandys CLA 2011-03-08 05:15:30 EST 
Will continue in M7.
Comment 2 John Arthorne CLA 2011-03-10 10:29:44 EST 
Note we currently have hard-coded settings in AuthorizationService, such as always granting users access to /workspace, /site, their own user profile, etc. I expect the right longer term solution is that these "default" rights come from the user's role, and the rights associated with the role are configurable somehow.
Comment 3 John Arthorne CLA 2015-05-05 14:46:35 EDT 
Closing as part of a mass clean up of inactive bugs. Please reopen if this problem still occurs or is relevant to you. For more details see:

https://dev.eclipse.org/mhonarc/lists/orion-dev/msg03444.html