Robert Tisma

Results 22 issues of Robert Tisma

selenium tests for: - creating group - update group - search group - adding application to group - adding user to group - delete group - remove app from group...

testing

selenium tests for: - creating application - update application - search application - creating token for application - delete application Should have ego data preloaded and linked to test Should...

low
testing

In the entity graph for Group entity, the call ```java group.getPermissions().get(0).getPolicy() ``` is possible with 1 select statement as defined with the named entity graph. When ```java group.getPermissions().get(0).getPolicy().getGroupPermissions() ``` results...

bug
SP:3
medium

Currently, there are 2 ids in TokenScope. This was intended to be a composite id, however, this is not following the JPA methodology. The methodology that should be used is...

bug
medium

Currently, delete operations on any BaseService permanently deletes the record from the database. Instead, entities should soft-delete entities, in the event they need to bring them back. This includes: -...

enhancement
Epic

Referring to the section titled `The Redundant save Anti-Pattern` in https://vladmihalcea.com/jpa-persist-and-merge/ many of the update and create procedures use the save method incorrectly. This needs to be fixed as it...

bug

As detailed in the spec under `deletion` - When deleting entities or entity relationships, a soft delete should always be performed (flag the record as deleted rather than physically deleting...

low

Currently, the policy owneer field is unused. The idea is that if a user creates a policy, they are the owner of that policy, and only they can write (i.e...

medium

Currently, there is no record of update or delete events to a permission. To implement something like this, 3 fields need to be introduced for auditable entities - `version`: field...

if you search for the use of `user.getStatus()` and `group.getStatus()` and `application.getStatus()`, you will see that they are not used directly with authorizing a token. Some deeper investigation is needed...

question
low
specs-needed