Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removed administrator role change permission #453

Open
wants to merge 2 commits into
base: sprint-9
Choose a base branch
from

Conversation

Dbreck-TAMU
Copy link

@Dbreck-TAMU Dbreck-TAMU commented Jan 13, 2025

Description

Resolves #452

Removed ability for administrators to modify a given users role.

@Dbreck-TAMU Dbreck-TAMU self-assigned this Jan 13, 2025
@Dbreck-TAMU Dbreck-TAMU changed the base branch from sprint-9-staging to sprint-9 January 13, 2025 20:33
@Dbreck-TAMU Dbreck-TAMU requested a review from kaladay January 13, 2025 20:33
@@ -59,9 +59,6 @@ public class WebSecurityConfig {
@Value("${spring.h2.console.enabled:false}")
private boolean h2ConsoleEnabled;

@Value("${server.servlet.session.cookie.domain:library.tamu.edu}")
private String domainName;

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please restore and override in properties for development.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes made, please review and verify.

@@ -151,8 +148,6 @@ public CookieSerializer cookieSerializer() {
serializer.setUseSecureCookie(false);
serializer.setCookiePath("/");
serializer.setCookieName("SESSION");
serializer.setDomainName(domainName);

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please restore and override in properties for development.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes made, please review and verify.

Copy link

@kaladay kaladay left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you provide a description of why the domainName property needs to be removed?

I am not understanding how that change relates to the path role permission change.
I suggest restoring the domainName properties.

@kaladay kaladay linked an issue Jan 14, 2025 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Only Super Admin should be able to change user roles
3 participants