Repository: kylin Updated Branches: refs/heads/2.2.x 53cad89b3 -> fb2580808
KYLIN-2949: The kylin does not get right authorities when the LDAP authentication service was used in RedHat OS. Signed-off-by: lidongsjtu <lid...@apache.org> Project: http://git-wip-us.apache.org/repos/asf/kylin/repo Commit: http://git-wip-us.apache.org/repos/asf/kylin/commit/fb258080 Tree: http://git-wip-us.apache.org/repos/asf/kylin/tree/fb258080 Diff: http://git-wip-us.apache.org/repos/asf/kylin/diff/fb258080 Branch: refs/heads/2.2.x Commit: fb25808088eb1aa857c674b42f969fdcc0a35d7c Parents: 53cad89 Author: peng.jianhua <peng.jian...@zte.com.cn> Authored: Thu Oct 19 18:40:23 2017 +0800 Committer: lidongsjtu <lid...@apache.org> Committed: Thu Oct 19 22:35:37 2017 +0800 ---------------------------------------------------------------------- .../java/org/apache/kylin/rest/security/AuthoritiesPopulator.java | 1 + 1 file changed, 1 insertion(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/kylin/blob/fb258080/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java ---------------------------------------------------------------------- diff --git a/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java b/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java index 592791c..2b9d8c9 100644 --- a/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java +++ b/server-base/src/main/java/org/apache/kylin/rest/security/AuthoritiesPopulator.java @@ -63,6 +63,7 @@ public class AuthoritiesPopulator extends DefaultLdapAuthoritiesPopulator { @Override public Set<GrantedAuthority> getGroupMembershipRoles(String userDn, String username) { + setGroupSearchFilter("(|(member={0})(memberUid={1}))"); Set<GrantedAuthority> authorities = super.getGroupMembershipRoles(userDn, username); Set<GrantedAuthority> userAuthorities = new HashSet<GrantedAuthority>();
