Details
-
Bug
-
Resolution: Fixed
-
Major
-
0.9
-
None
-
Unknown
-
Description
SolrConnector.keywordSearch builds its query with the collections filter (and now the language filter) but never applies buildWikiQuery, unlike the semantic path (prepareQuery). Collection names in the filter are not wiki-qualified, so a same-named collection on another wiki leaks its chunks into keyword results. The per-document canView post-filter still applies, but the collection-level group gate (hasAccess) was evaluated only against the current wiki's collection — so content behind a query-group restriction on the other wiki's collection can surface to users who wouldn't pass that collection's gate.