[OAK-9867] AutoMembershipProvider.isMember must not ignore 'includeInherited' flag

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.46.0
• Component/s: auth-external
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 27/Jul/22 13:21
• Updated: 21/Dec/22 03:39
• Resolved: 27/Jul/22 15:53

Description

the implementation of DynamicMembershipProvider.isMember in AutoMembershipProvider currently ignores the the 'includeInherited'.

in other words: if a group 'a' configured in the automembership configuration is member of group 'b', then AutoMembershipProvider.isMember(b, anyExternalUserInFromTheDynamicIDP, true), should return true.

Issue Links

• Discovered while testing: OAK-9803 Extend DynamicSyncHandler to allow for dynamic groups