[OAK-9871] AutoMembershipPrincipals.getAutoMembership must resolved inherited groups

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.46.0
• Component/s: auth-external
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 28/Jul/22 07:50
• Updated: 21/Dec/22 03:39
• Resolved: 29/Jul/22 12:54

Description

while testing OAK-9803 i noticed that ExternalGroupPrincipalProvider#getMembershipPrincipals and ExternalGroupPrincipalProvider#getPrincipals do not included groups inherited from configured auto-membership groups:

if group 'a' is configured as automembership and is in turn member of 'b', 'b' must also be part of the complete set of principals return by either methods.

Issue Links

• Discovered while testing: OAK-9803 Extend DynamicSyncHandler to allow for dynamic groups