Mapping External Roles to System Roles Does Not Work with LDAP Authentication

Issue Description

Customer configured TIBCO JasperReports^® Server to perform external authentication with LDAP per Authentication Cookbook.

As a part of the configuration, he specified mapping an external role (LDAP group) to system administrator role via the organizationRoleMap property of the mtExternalUserSetupProcessor bean:

        <property name="organizationRoleMap">            <map>                <!-- Example of mapping customer roles to JRS roles -->                <entry>                    <key>                        <value>Chemist Admin</value>                    </key>                    <!-- JRS role that the <key> external role is mapped to-->                    <value>ROLE_ADMINISTRATOR</value>                </entry>            </map>        </property>[/code]

But when an LDAP user from 'Chemist Admin' group logged into TIBCO JasperReports^® Server, ROLE_ADMINISTRATOR system role was not assigned to him per the configuration.

Resolution

Before processing external role, TIBCO JasperReports^® Server performs additional actions with the role name:

• add ROLE_ prefix to the name
• capitalize role name

As a result, the key should be a role name that your mapping creates, after adding the prefix and capitalization:

        <property name="organizationRoleMap">            <map>                <!-- Example of mapping customer roles to JRS roles -->                <entry>                    <key>                        <value>ROLE_CHEMIST ADMIN</value>                    </key>                    <!-- JRS role that the <key> external role is mapped to-->                    <value>ROLE_ADMINISTRATOR</value>                </entry>            </map>        </property>[/code]

Solution tested with TIBCO JasperReports^® Server v.7.2.0

AS-20190815