Skip to content

fix(management): delete OutgoingAccessRequest when the remote proof can not be found - abandoned

Niels requested to merge review/1653-fix-sync-bug into master

This MR fixes the issue, but this bug report uncovered a flaw in our software:

You can replicate this bug as follows:

  1. Org a creates a service 'a1'
  2. Org b requests access to the service
  3. Org a accepts the access request
  4. Close all browsers which have the management ui of org b open (to prevent triggering the sync call)
  5. Org a removes service 'a1'
  6. Org a creates the service 'a1'
  7. Open the directory ui of org b
  8. The error toaster will popup.

The flaw: access proofs can be linked to previously created services which have been removed and recreated with the same name.

Issue: #1653 (closed)

Edited by Niels

Merge request reports