topic Why is the modifier of a content a random user from the list of logged in users? in Alfresco Forum

Why is the modifier of a content a random user from the list of logged in users?

darkstar1 — Wed, 01 Mar 2017 13:51:32 GMT

I have a webscript:desc.xml - <webscript> <shortname>LibreOffice Online PutFile</shortname> <url>/wopi/files/{fileId}/contents</url> <family>LibreOffice Online</family> <authentication>none</authentication> <format default="json

Re: Why is the modifier of a content a random user from the list of logged in users?

janv — Wed, 01 Mar 2017 15:59:23 GMT

That does look a little odd - but would need to debug with the "auditable" behaviour with your test case, etc.

Out of interest, do you see the same effect if you wrap with something like this instead ... ?


...
retryingTransactionHelper.doInTransaction(new RetryingTransactionCallback<Void>()
{
 @Override
 public Void execute() throws Throwable
 {
 AuthenticationUtil.pushAuthentication();
 try
 {
 AuthenticationUtil.setRunAsUser(tokenInfo.getUserName());
 // ... do more here ...
 }
 finally
 {
 AuthenticationUtil.popAuthentication();
 }
 return null;
 }
}, false, true);
...

Regards,

Jan

Re: Why is the modifier of a content a random user from the list of logged in users?

douglascrp — Thu, 02 Mar 2017 20:09:15 GMT

As I was saying in our chat on Skype, I believe these links can help you with the problem

[solved] AuthenticationUtil.runAs: how to get ride of this ?

https://community.alfresco.com/thread/194553-action-with-setrunasuser#comment-652744

Try to use the AuthenticationUtil.setFullyAuthenticatedUser method with the user in the token.

Re: Why is the modifier of a content a random user from the list of logged in users?

janv — Fri, 03 Mar 2017 10:26:07 GMT

Actually, yes as suggested by Douglas, that makes even more sense in your example, eg.

...
try
{
  AuthenticationUtil.setFullyAuthenticatedUser(tokenInfo.getUserName());
  // ... do more here ...
}
finally
{
  AuthenticationUtil.clearCurrentSecurityContext();
}
...

Regards,

Jan

Re: Why is the modifier of a content a random user from the list of logged in users?

darkstar1 — Fri, 10 Mar 2017 10:45:51 GMT

Thanks Jan.

It seems AuthenticationUtil.setFullyAuthenticatedUser() did the trick. So far testing hasn't resulted in the re-appearance of the bug.