Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-5420

Availability of EEPs in RA is cached session cached

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: EJBCA 6.6.0
    • Fix Version/s: EJBCA 6.6.0
    • Component/s: None
    • Labels:
      None
    • Issue discovered during:
      Another issue

      Description

      org.ejbca.ra.RaAccessBean caches a boolean flag if there are available EEPs on first access and this is never updated.

      Thanks to Samuels AccessSet.WILDCARD_SOME we can instead check

      AccessRulesConstants.ENDENTITYPROFILEPREFIX + AccessSet.WILDCARD_SOME + AccessRulesConstants.CREATE_END_ENTITY

      This will however not ignore the case where we are authorized to create for more than one EEP, but auhtorized to this EEP's CAs.

      With this change, modifications of access rules that affect this flag will be instantly (after cache propagation) available.

      Discovered during debug of ECA-5120.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              johan Johan Eklund
              Reporter:
              johan Johan Eklund
              Verified by:
              Samuel Lidén Borell
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: