Uploaded image for project: 'PUBLIC - OAuth2'
  1. PUBLIC - OAuth2
  2. OAUTH2-280

Unclear error when attempting to impersonate OAuth2 application creator

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: Master, 7.2.x
    • Fix Version/s: Master, 7.2.x
    • Component/s: None
    • Labels:
      None

      Description

      Steps to reproduce:

      1. Sign in as portal admin
      2. Create OAuth2 Application with clientId = 12345, set up only PKCE grant and save
      3. Edit permissions ... grant User role permissions to VIEW UPDATE and CREATE_TOKEN
      4. Go to Roles and assign User role ACCESS_IN_CONTROL_PANEL for OAuth 2 Administration portlet
      5. Create a new user and sign in
      6. Go to Control Panel -> OAuth 2 Administration
      7. Set secret (e.g. 12345) and enable Client credentials flow, save

      Actual Result: An error appears as expected, but the error message reads:

      Error: This operation cannot be performed because you cannot impersonate user {1}.
      

      Expected Result: The "{1}" should be replaced with more understandable user info (e.g. user sn or user name).

        Attachments

          Activity

            People

            • Assignee:
              joshua.chong Joshua Chong
              Reporter:
              joshua.chong Joshua Chong
              Participants of an Issue:
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Packages

                Version Package
                Master
                7.2.x