Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-12840

an external user with no assigned privileges can signin into the UI

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 3.2.1
    • Fix Version/s: None
    • Component/s: Security

      Description

      Set up an external security realm in Nexus (such as LDAP).  Do not map any external users or groups into Nexus.

      You will find that every user in the external security system can now log into the Nexus UI.  Note that they do not gain access to anything. But still, this seems incorrect.

      Note that Nexus 2.x has a privilege that controls whether or not login to the UI is possible.  Nexus 3 should also have a privilege for this.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            rseddon Rich Seddon
            Last Updated By:
            Rich Seddon Rich Seddon
            Votes:
            4 Vote for this issue
            Watchers:
            9 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title