-
-
Notifications
You must be signed in to change notification settings - Fork 4.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Make sure group management works with all types of group names #20035
Conversation
e231b38
to
19c90a7
Compare
Maybe add some phpunit testing? 🙈 |
Yeah, I'll do that. Anyone has concerns/ideas regarding the double encoding? |
Looks sane to me |
Not a fan but if it works...then great! |
19c90a7
to
57bb282
Compare
Added some test cases 😉 |
/backport to stable18 |
57bb282
to
8082a99
Compare
Rebased and ready for review. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
tested and works 👍
57be87e
to
7811c8d
Compare
ccea55c
to
3ec9a01
Compare
Signed-off-by: Julius Härtl <jus@bitgrid.net>
Signed-off-by: Julius Härtl <jus@bitgrid.net>
3ec9a01
to
db90023
Compare
/compile amend / |
Signed-off-by: Julius Härtl <jus@bitgrid.net> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
db90023
to
c20321e
Compare
backport to stable18 in #20433 with conflicts |
Group ids currently don't have any character limitations, which means that you can create groups like "Department A/B" which will fail on both the provisioning API as well as the routes provided by our user management.
This PR ensures that all group ids are encoded and properly handled by both the backend and the frontend then.
I'm not to happy about the double encoding here, but this is the only way that we can keep the groupId as part of the URL without making it a query parameter and therefore breaking the provisioning api.
In general I would prefer to add some character limitation to the group id, similar to how we do it for the user id, where
/
is blocked, but that would still leave us with instances that might have those broken ids.