[NIFI-10130] AzureGraphUserGroupProvider fails with nested groups

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.16.3
• Fix Version/s: 1.19.0
• Component/s: Security
• Environment: Azure AD
• Assignee: Seokwon Yang
• Reporter: Daniel Scheiner
• Created: 16/Jun/22 17:35
• Updated: 09/Nov/22 21:47
• Resolved: 09/Nov/22 21:47

Description

Using the AzureGraphUserGroupProvider fails if one of the groups in the AzureAD has another group as "members".

Error is:

Caused by: java.lang.NullPointerException: null

        at org.apache.nifi.authorization.azure.AzureGraphUserGroupProvider.getUsersFrom(AzureGraphUserGroupProvider.java:383)

The function "getUsersFrom" needs to check if a "user" is actually another group and get its users from there... 

Issue Links

• links to: GitHub Pull Request #6135