Harrison Sheinblatt created KNOX-3475:
-----------------------------------------
Summary: Delegation policy enforcement in
JdbcDelegationPolicyService.evaluate() must check status
Key: KNOX-3475
URL: https://issues.apache.org/jira/browse/KNOX-3475
Project: Apache Knox
Issue Type: Sub-task
Components: JWT
Reporter: Harrison Sheinblatt
There's no check the status is active before using the policy currently. If a
policy is not deleted but instead updated with revoked status, then the policy
should not be applied. Unit tests need to be added as well.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)