8000 Securityidentity fix · Pull Request #6012 · symfony/symfony · GitHub
[go: up one dir, main page]

Skip to content

Securityidentity fix #6012

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from
Closed

Securityidentity fix #6012

wants to merge 2 commits into from

Conversation

ghost
Copy link
@ghost ghost commented Nov 14, 2012

Bug fix: yes
Feature addition: no
Backwards compatibility break: no
Symfony2 tests pass: no
Fixes the following tickets: ~
Todo: ~
License of the code: MIT
Documentation PR: ~

RoleSecurityIdentity::getRole() returned the CustomRole Object when CustomRole did not extend the symfony Role.

With this patch RoleSecurityIdentity can also handle custom implementations of RoleInterface.

Failing Tests:
On my environment the tests for 2.0 results in 30 failing tests:

FAILURES!
Tests: 5075, Assertions: 11835, Failures: 30, Incomplete: 11, Skipped: 27.

Therefor I wrote "Symfony2 tests pass: no".
My changes introduce no new failing tests.

@stloyd
Copy link
Contributor
stloyd commented Nov 14, 2012

It's duplicate. i.e. #5076 (and many others)

@ghost
Copy link
Author
ghost commented Nov 14, 2012

Sorry, I didn't check this topic before.

@ghost ghost closed this Nov 14, 2012
m14t added a commit to m14t/symfony-docs that referenced this pull request Apr 23, 2013
The documentation seems to assume the implementation present in commit
symfony/symfony#1673, which reverted soon after due
to a potential, but undisclosed security hole (citation @schmittjoh in symfony/symfony@af70ac8).

This incorrect documentation has likely been the source of many
of the following issues:
* symfony/symfony#1538 - [ACL RoleSecurityIdentity] check if instance of Role
* symfony/symfony#1748 - Replace Role to RoleInterface for RoleSecurityIdentity
* symfony/symfony#4309 - Issue related to custom group (role) and ACL/ACE
* symfony/symfony#5026 - potential bug in Symfony\Component\Security\Acl\Domain\RoleSecurityIdentity
* symfony/symfony#5076 - [Acl] altered the behaviour of RoleSecurityIdentity
* symfony/symfony#5171 - Fix/role security identity
* symfony/symfony#5303 - [Security] Check for RoleInterface instead of Role object in RoleSecurityIdentity
* symfony/symfony#5909 - Allow Custom Roles to implement the RoleInterface
* symfony/symfony#6012 - Securityidentity fix
This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant
0