adding roles on authorisation in multitenant enviroment

[sjongenelen]

Hi Guys,

Installing JS4 at the moment, and trying to config the following:

On user first authentication (LDAP in this case), add a role to his account.

This seemed easily done, but i think im lacking syntax skills! I need to add the role 'public' in the organisation 'organization_1'.
Although 'public' is an unique role name in my enviroment, it is still not added.

I think i need to specify organisation / ROLE  but i dont know how.

 

P.s. logger says: WARN UserAuthorityServiceImpl,http-8080-1:878 - Updated user: username. Roles are now:
public
ROLE_USER

Code:

<bean id="mtUserAuthorityServiceTarget"        class="com.jaspersoft.jasperserver.multipleTenancy.MTUserAuthorityServiceImpl">        <property name="sessionFactory" ref="sessionFactory"/>        <property name="objectMappingFactory" ref="mappingResourceFactory"/>        <property name="persistentClassFactory" ref="persistentMappings"/>        <property name="profileAttributeService" ref="profileAttributeService"/>        <property name="defaultInternalRoles">          <list>            <value>ROLE_USER</value>            <value>public</value>          </list>        </property>        <property name="multiTenancyConfiguration"><ref bean="multiTenancyConfiguration"/></property>        <property name="securityProvider"><ref local="tenantSecurityProvider"/></property>        <property name="securityContextProvider"><ref bean="${bean.securityContextProvider}"/></property>        <property name="tenantPersistenceResolver"><ref bean="${bean.hibernateTenantService}"/></property>        <property name="userProcessors">            <list>                <!-- For LDAP authentication -->                <!-- ref bean="ldapExternalUserProcessor"/-->                <ref bean="defaultExternalUserProcessor"/>            </list>        </property>        <property name="auditContext" ref="${bean.auditContext}"/>        <property name="databaseCharactersEscapeResolver" ref="databaseCharactersEscapeResolver"/>    </bean>

[sjongenelen]

nothing on this, anyone? No documentation on this and i dont want to waste a support call for this small question..!

[ernestoo]

Isn't the syntax just ORGANIZATION_NAME|USER_NAME ?

[sjongenelen]

unfortunately, no

 

if i do this, JS wil create the role as a property of the user without the role actually existing.