[Mono-bugs] [Bug 385877] RolePrincipal.GetRoles returns null on Expired details.

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=385877

User ivan at chimerical.com.au added comment
https://bugzilla.novell.com/show_bug.cgi?id=385877#c4





--- Comment #4 from Ivan Hamilton <ivan at chimerical.com.au>  2008-05-07 09:38:55 MST ---
There's a few issues here:

* Reloading the roles cache from the provider
Current:
The cache is reloaded from the provider only if NOT expired.
For an expired ticket, the cache is never filled from the provider.
Desired:
The cache is reloaded from the provider if expired.
For an expired ticket, the cache is refilled from the provider.


* Update issue & expiry date for expired tickets
Current:
New issue and expiry dates aren't given for expired tickets.
Desired:
If the ticket has expired, a new issue & expiry date should be set.


* Incrementing the cookie expiry date
Current:
System.Web.Security.Roles.CookieSlidingExpiration isn't being observed.
When the encrypted ticket is created, the expiry date is ALWAYS set to
issue+timeout.
Desired:
If System.Web.Security.Roles.CookieSlidingExpiration is true AND less than half
the cookie timeout is remaining before expiry, then the encrypted ticket should
get a new issue & expiry date


* Obey Roles.MaxCachedResults
Current:
Roles.MaxCachedResults is ignored
Desired:
If the role count exceeds the cache limit return null for the ticket.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.