Project

General

Profile

feature request #7148

Updated by Andreas Kohlbecker almost 6 years ago

The GrantedAuthorityRevokingRegistrationUpdateLister deletes GrantedAuthorityImpl entities but the references to GrantedAuthorityImpl in User and Group are not deleted with the entities. 

 Update of the description with documentation from the GrantedAuthorityRevokingRegistrationUpdateListe.class: 


 This Hibernate PostUpdateEventListener is responsible for revoking GrantedAuthorities from any user which is having per entity permissions in the object graph of the `Registration`being updated This encompasses GrantedAuthotities with the CRUD values CRUD.UPDATE, CRUD.DELETE. Please refer to the method documentation of collectDeleteCandidates(Registration) for further details. 

 The according permissions are revoked when the RegistrationStatus is being changed by a database update. The RegistrationStatus causing this are contained in the constant MODIFICATION_STOP_STATES which are 

 * RegistrationStatus.PUBLISHED, 
 * RegistrationStatus.READY, 
 * RegistrationStatus.REJECTED 



 

Back