User Story #6316 (closed)
Opened 13 years ago
Closed 13 years ago
Guest account accessibility
Reported by: | atarkowska | Owned by: | |
---|---|---|---|
Priority: | major | Milestone: | OMERO-4.4 |
Component: | Security | Keywords: | n.a. |
Cc: | jamoore | Story Points: | n.a. |
Sprint: | n.a. | Importance: | n.a. |
Total Remaining Time: | 0.0d | Estimated Remaining Time: | n.a. |
Description (last modified by atarkowska)
Because OMEROBlitz provides access to OmeroApi services for OmeroClients that are logged in only, guest account was designed to give access to security annotated methods @PermitAll? to be called by all users regardless of their status.
Currently there is limited number of functionality that can be called by Guest user, like: all methods in IConfig and few in IAdmin (reportForgottenPassword, getEventContext, getSecurityRoles, changeExpiredCredentials). Based on the community feedback it seams they have higher expectation of the usage:
Change History (4)
comment:1 Changed 13 years ago by atarkowska
- Description modified (diff)
comment:2 Changed 13 years ago by agilo
- Status changed from new to accepted
comment:3 Changed 13 years ago by jmoore
- Cc jmoore added
comment:4 Changed 13 years ago by jmoore
- Milestone changed from Unscheduled to OMERO-Beta4.4
- Resolution set to fixed
- Status changed from accepted to closed
Note: this needs testing after the work on #6341. Adding comment to the decorator branch to this effect.
Updated status, related task in progress