Uploaded image for project: 'Magnolia UI'
  1. Magnolia UI
  2. MGNLUI-7257

Deleting JCR items needs access to root which might lead to access denied exception

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Neutral Neutral
    • 6.3.0, 6.2.25
    • 6.2.20
    • None
    • None

      Steps to reproduce

      1. Go to Magnolia demo
      2. Log in as superuser, go to Security App and edit the userrole "/travel-demo-tour-editor"
      3. On the Access Control list tab set ACL for dam to "/tours" (Read/Write, Selected and sub-nodes)
      4. Log in as tina
      5. Go to Assets app and open "/tours" folder
      6. Delete one of the assets
      7. Publish deletion
      8. Once the deletion has been successful, click on any of the checkboxes on the left column (e.g., on the /travel folder)
      9. Check an error banner appears

      If you click anywhere else, the error doesn't happen, it has the be a checkbox
      an error banner with the error message "Access denied" appears, even though the deletion has been successful.

      This happens, because there is a weird interaction with a deleted node directly under "/" at this point, please have a look.

      Attached the full log stack trace.

        Acceptance criteria

              rkovarik Roman Kovařík
              ccantalapiedra Carlos Cantalapiedra
              Nucleus
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Bug DoR
                  Task DoD