exec_as_user is not federation friendly

[korydraughn]

• main
• 4-2-stable

---

Similar to irods/irods#6268

The code in question:

irods_capability_storage_tiering/exec_as_user.hpp

Lines 8 to 27 in c16624a

	template <typename Function>
	int exec_as_user(rcComm_t* _comm, const std::string& _user_name, Function _func)
	{
	auto& user = _comm->clientUser;
	// need to be able to have a rodsuser/rodsuser 'switch hats'
	//if (user.authInfo.authFlag < LOCAL_PRIV_USER_AUTH) {
	// THROW(CAT_INSUFFICIENT_PRIVILEGE_LEVEL, "Cannot switch user");
	//}
	const std::string old_user_name = user.userName;
	rstrcpy(user.userName, _user_name.data(), NAME_LEN);
	irods::at_scope_exit<std::function<void()>> at_scope_exit{[&user, &old_user_name] {
	rstrcpy(user.userName, old_user_name.c_str(), MAX_NAME_LEN);
	}};
	return _func(_comm);
	} // exec_as_user

Workaround

Grant permission to the local user of the same name because that is the user that is being found.

[trel]

related to #215 ?

[alanking]

I believe this is related to #215 but we want to make sure that things are working as expected across redirects as well as across federation. I believe #228 fixes the cross-zone case, so we just need to confirm the redirection case now.