[
http://jira.magnolia.info/browse/MAGNOLIA-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17740#action_17740
]
Jan Haderka commented on MAGNOLIA-2350:
---------------------------------------
# During activation, author instance has to login into public and given user
have to have proper Role/ACLs set on the public as well (usually done by
activating the user herself). Now if you are using some 3rd party
authentication you must make sure that it actually succeeds on public as well,
not only on author.
# Yes, workflow engine can't use given user credentials since it doesn't know
users password and can't make valid login to the public instance, on the other
hand superuser is a system account and is always present inside of magnolia
itself so it can use this account to log in. The workaround would be to write
your own activation command that retrieves credentials (username/pwd) from your
3rd pary auth system and uses that to authenticate against public instance and
perform activation as given user.
> When logged in as a different user activation its still being issued by
> superuser.
> ----------------------------------------------------------------------------------
>
> Key: MAGNOLIA-2350
> URL: http://jira.magnolia.info/browse/MAGNOLIA-2350
> Project: Magnolia
> Issue Type: Bug
> Components: activation
> Affects Versions: 3.5.4
> Reporter: Edmond
> Assignee: Philipp Bracher
>
> When activating a node logged in as a new user created with superuser role,
> the activation occurs as the user "superuser" (not the new user i am logged
> in as).
> The log states the user is superuser despite being logged in as a different
> user:
> Exchange : user [superuser]
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/
----------------------------------------------------------------
