[OAK-7966] Avoid adding excluded principal to cug policy

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.10.0, 1.12.0
• Component/s: authorization-cug
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 18/Dec/18 14:20
• Updated: 28/Mar/19 13:10
• Resolved: 18/Dec/18 16:49

Description

stillalex, i just noticed that it is possible to add principals to a cug policy that are effectively excluded from evaluation altogether. i think it would be better to avoid adding those principals avoiding any confusion about the possible effect that may arise by doing so.

proposed patch will follow asap....