Details
-
Bug
-
Resolution: Duplicate
-
Major
-
None
-
2.1 Final
-
None
-
all
Description
Example: If the filename specified in the samples download paragraph contains special characters (e.g. german umlaute), then magnolia returns a 403 http status code. Even if the requested filename is URL encoded.
In AccessManagerImpl.getPermissions(String) the requested URL is matched against the ACL. The internal ACL patterns do not support special characters, hence a AccessDeniedException is thrown.
A temporary solution would be to change the ACL patterns in SimpleUrlPattern to ".*", since the dialog values do not get validated anyway.
Checklists
Acceptance criteria