Hi Omindu, What is the difference of giving all the child permissions and parent admin permission? Is there any difference in the functionality?
Regards, Dilini On Tue, Oct 6, 2015 at 12:19 AM, Omindu Rathnaweera <omi...@wso2.com> wrote: > Hi Dilini, > > Only the super admin can create a role with Admin permission, hence the > exception in your first scenario. In your second scenario, you are giving > all the child permissions which is different from giving the parent Admin > permission. > > Have a look at the first few lines at *UserRealmProxy::addRole *[1] > method. In the first scenario, the list of permissions passed to the > addRole method includes "/permission/admin" (Since 'Admin Permissions' is > selected) while the second scenario doesn't. In the addRole method, if the > "/permission/admin" is included in the list of permissions, an exception is > thrown. So this should be the expected behavior. > > > [1] - > https://github.com/wso2/carbon-identity/blob/master/components/user-mgt/org.wso2.carbon.user.mgt/src/main/java/org/wso2/carbon/user/mgt/UserRealmProxy.java#L869 > > Regards, > Omindu. > > > On Mon, Oct 5, 2015 at 6:05 PM, Dilini Gunatilake <dili...@wso2.com> > wrote: > >> Hi IS team, >> >> I tried to create a new role logged in from a user with default admin >> role in MB 3.0.0-ALPHA. When I give permissions as in [1] I get an error as >> in [2] and couldn't create the role. Please find the full stack trace >> attached. >> >> But, if I assign permissions as in [3], I can successfully create the >> role. Is this due to a permission issue in the UI? >> >> [1] >> >> [2] >> >> >> >> [3] >> >> Thank you. >> Regards, >> >> -- >> >> *Dilini GunatilakeSoftware Engineer - QA Team* >> Mobile : +94 (0) 771 162518 >> dili...@wso2.com >> >> -- >> You received this message because you are subscribed to the Google Groups >> "WSO2 Engineering Group" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to engineering-group+unsubscr...@wso2.com. >> For more options, visit https://groups.google.com/a/wso2.com/d/optout. >> > > > > -- > Omindu Rathnaweera > Software Engineer, WSO2 Inc. > Mobile: +94 771 197 211 > -- *Dilini GunatilakeSoftware Engineer - QA Team* Mobile : +94 (0) 771 162518 dili...@wso2.com
_______________________________________________ Dev mailing list Dev@wso2.org http://wso2.org/cgi-bin/mailman/listinfo/dev
