[
https://issues.apache.org/jira/browse/KNOX-3475?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18116748#comment-18116748
]
ASF subversion and git services commented on KNOX-3475:
-------------------------------------------------------
Commit d2d808ae061c179300662191f8fe7ab0448e2165 in knox's branch
refs/heads/master from Sandor Molnar
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=d2d808ae0 ]
KNOX-3475: enforce delegation policy status at authorization time so a revoked
(not deleted) policy no longer authorizes token exchange (#1414)
> Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must
> check status
> -----------------------------------------------------------------------------------------
>
> Key: KNOX-3475
> URL: https://issues.apache.org/jira/browse/KNOX-3475
> Project: Apache Knox
> Issue Type: Sub-task
> Components: JWT
> Reporter: Harrison Sheinblatt
> Assignee: Sandor Molnar
> Priority: Major
> Time Spent: 40m
> Remaining Estimate: 0h
>
> There's no check the status is active before using the policy currently. If a
> policy is not deleted but instead updated with revoked status, then the
> policy should not be applied. Unit tests need to be added as well.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
