servicecatalog
Subscription search - invalid encrypted UDAs indexing
[Version] 16.1 fix4 2017/10/01
[How to reproduce]
- Define one encrypted subscription UDA with value "dog" and one unencrypted with value "cat"
- Create a subscription with defined UDAs
- Check subscription index in master indexer domain
[Expected result] Subscription UDA values are indexed as "cat" and the encrypted "dog" is not indexed.
[Observed result] UDA values are indexed as "cat" and "null". "null" is a searchable term in subscription search, and returns all subscriptions with UDAs with encrypted values.
For security reasons, encrypted UDAs must not be searchable and therefore excluded from search index. However, Sylvia has the assumption there is still an issue with UDA search that sometimes leads to too many search results. To sort out the effects of this issue, some reproduction steps would be helpful here. Therefore, I propose the following procedure. @grubskim
- Implement the indexer to filter password UDAs.
- Provide build with implementation of 1.
@SylviaDehn
- Delete index from test data
- Test UDA search with the provided build a) If the issue can be reproduced, please describes the steps and/or provide a database dump. b) If is not reproduced after enough testing, close this issue with resolution WORKSFORME.
[Fixed version] 16.1 fix 5 [Details of fix] A single indexed uda.value field in subscriptions consist of all assigned UDA values separated by spaces. The previous behaviour was that the encrypted values were set to "null" (string), and they could be searched by typing "null". Now they are not included in the index. Unencrypted UDAs work correctly.
[Version] 16.1 fix6 2017/02/17
- recreate search index
- as customer log in at marketplace and enter "null" in subscription search
- three of 46 subscriptions are listed. No encrypted values exist for these subscriptions. The 3 subscriptions listed do not have "null" attributes or names or description. whoever is working on this, please ask for a db dump.
