Harrison Sheinblatt created KNOX-3475:
-----------------------------------------

             Summary: Delegation policy enforcement in 
JdbcDelegationPolicyService.evaluate() must check status
                 Key: KNOX-3475
                 URL: https://issues.apache.org/jira/browse/KNOX-3475
             Project: Apache Knox
          Issue Type: Sub-task
          Components: JWT
            Reporter: Harrison Sheinblatt


There's no check the status is active before using the policy currently. If a 
policy is not deleted but instead updated with revoked status, then the policy 
should not be applied. Unit tests need to be added as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to