Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SafPlatformUser - Valid Username Blank Password #72

Closed
dkelosky opened this issue Nov 5, 2019 · 3 comments · Fixed by #78
Closed

SafPlatformUser - Valid Username Blank Password #72

dkelosky opened this issue Nov 5, 2019 · 3 comments · Fixed by #78
Assignees
@plavjanik @dkelosky
Labels
Priority: Critical Type: Bug
Projects
Defects SDK 2.0.0 SDK 1.0.0

Comments

@dkelosky
Copy link
Contributor

dkelosky commented Nov 5, 2019

Reporting for another team - SafPlatformUser() does not reject a valid user name with a blank password when called through the SDK basic auth code.

I haven't had a chance to independently verify but capturing here until it is verified.
@dkelosky
Copy link
Contributor Author

dkelosky commented Nov 6, 2019

Update - appears to only occur on CA Top Secret systems

@dkelosky dkelosky self-assigned this Nov 15, 2019
@plavjanik plavjanik added this to High priority in Defects Nov 16, 2019
@plavjanik plavjanik added this to To do in SDK 2.0.0 Nov 16, 2019
@plavjanik plavjanik self-assigned this Nov 16, 2019
@plavjanik plavjanik mentioned this issue Nov 17, 2019
Merged
@plavjanik
Copy link
Contributor

It happens on all systems when the user ID of the server has the authority to pass SURROGAT class checks. More details and fix is in #78

SDK 2.0.0 automation moved this from To do to Done Nov 17, 2019
Defects automation moved this from High priority to Closed Nov 17, 2019
@plavjanik
Copy link
Contributor

Fixed in v0.7.1

@plavjanik plavjanik added this to Done in SDK 1.0.0 Feb 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@plavjanik plavjanik

@dkelosky dkelosky

Labels
Priority: Critical Type: Bug
Projects
Defects
  
Closed
SDK 1.0.0
  
Done
SDK 2.0.0
  
Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Check for empty password before calling PlatformUser zowe/sample-spring-boot-api-service
2 participants
@plavjanik @dkelosky