[
https://issues.apache.org/jira/browse/KNOX-3475?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandor Molnar updated KNOX-3475:
--------------------------------
Status: Patch Available (was: Open)
> Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must
> check status
> -----------------------------------------------------------------------------------------
>
> Key: KNOX-3475
> URL: https://issues.apache.org/jira/browse/KNOX-3475
> Project: Apache Knox
> Issue Type: Sub-task
> Components: JWT
> Reporter: Harrison Sheinblatt
> Assignee: Sandor Molnar
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> There's no check the status is active before using the policy currently. If a
> policy is not deleted but instead updated with revoked status, then the
> policy should not be applied. Unit tests need to be added as well.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)