Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-8457

[fiware-stackoverflow] How does roles work in Keyrock?

        Details

          Description

          Created question in FIWARE Q/A platform on 29-03-2017 at 22:03
          Please, ANSWER this question AT http://stackoverflow.com/questions/43103151/how-does-roles-work-in-keyrock

          Question:
          How does roles work in Keyrock?

          Description:
          I want to know how the role based authorization works in FIWARE Keyrock. I have tested a scenario where a user A registers an application appA in Keyrock. The user B that is not on the authorized list for application appA can request a token for another application (appB, for example) and successfully access the appA with the token obtained from appB.

          Another test performed was to include user A in the authorized list for appA, but with a role that has no permissions. Again, the user A gets access to appA with credentials from another application.

          Can anyone explain me how this work, if it really work?

            Activity

            Ascending order - Click to sort in descending order
            backlogmanager Backlog Manager created issue -
            Hide
            Permalink
            backlogmanager Backlog Manager added a comment -

            2017-03-30 00:05|CREATED monitor | # answers= 0, accepted answer= False

            Show
            backlogmanager Backlog Manager added a comment - 2017-03-30 00:05|CREATED monitor | # answers= 0, accepted answer= False
            backlogmanager Backlog Manager made changes -
            Field Original Value New Value
            Component/s FIWARE-TECH-HELP [ 10278 ]
            fla Fernando Lopez made changes -
            HD-Enabler KeyRock [ 10889 ]
            Description
            Created question in FIWARE Q/A platform on 29-03-2017 at 22:03
            {color: red}Please, ANSWER this question AT{color} http://stackoverflow.com/questions/43103151/how-does-roles-work-in-keyrock


            +Question:+
            How does roles work in Keyrock?

            +Description:+
            I want to know how the role based authorization works in FIWARE Keyrock. I have tested a scenario where a user A registers an application appA in Keyrock. The user B that is not on the authorized list for application appA can request a token for another application (appB, for example) and successfully access the appA with the token obtained from appB.

            Another test performed was to include user A in the authorized list for appA, but with a role that has no permissions. Again, the user A gets access to appA with credentials from another application.

            Can anyone explain me how this work, if it really work?
            		 Created question in FIWARE Q/A platform on 29-03-2017 at 22:03
            {color: red}Please, ANSWER this question AT{color} http://stackoverflow.com/questions/43103151/how-does-roles-work-in-keyrock


            +Question:+
            How does roles work in Keyrock?

            +Description:+
            I want to know how the role based authorization works in FIWARE Keyrock. I have tested a scenario where a user A registers an application appA in Keyrock. The user B that is not on the authorized list for application appA can request a token for another application (appB, for example) and successfully access the appA with the token obtained from appB.

            Another test performed was to include user A in the authorized list for appA, but with a role that has no permissions. Again, the user A gets access to appA with credentials from another application.

            Can anyone explain me how this work, if it really work?
            HD-Chapter Security [ 10841 ]
            fla Fernando Lopez made changes -
            Assignee Alvaro Alonso [ aalonsog ]
            aalonsog Alvaro Alonso made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            aalonsog Alvaro Alonso made changes -
            Status In Progress [ 3 ] Answered [ 10104 ]
            aalonsog Alvaro Alonso made changes -
            Resolution Done [ 10000 ]
            Status Answered [ 10104 ] Closed [ 6 ]
            fla Fernando Lopez made changes -
            Fix Version/s 2021 [ 12600 ]
            Transition Time In Source Status Execution Times Last Executer Last Execution Date
            Open Open In Progress In Progress
            		4d 14h 24m 1 Alvaro Alonso 03/Apr/17 2:29 PM
            In Progress In Progress Answered Answered
            		2s 1 Alvaro Alonso 03/Apr/17 2:29 PM
            Answered Answered Closed Closed
            		1 Alvaro Alonso 03/Apr/17 2:29 PM

              People

              • Assignee:
                aalonsog Alvaro Alonso
                Reporter:
                backlogmanager Backlog Manager
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: