Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-12552

AuthorizationManager unexpectedly denies access for reference to entities inside documents (object, attachments, ...)

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 7.2-rc-1
    • 7.2-milestone-3
    • Security
    • None
    • Unit
    • Unknown
    • N/A
    • N/A

    Description

      When you call AuthorizationManager with a reference to an attachment, an object or other inside entities of a document, and it replies true for the document itself, it actually replies false for the object inside that same document.
      Since access right are limited at document level, this is obviously unexpected.

      Attachments

        Activity

          People

            softec Denis Gervalle
            softec Denis Gervalle
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: