[MGNLREST-113] Results of rest under anonymous will be empty, unless anonymous has ACLs to the target workspaces. Created: 12/Sep/17  Updated: 11/Oct/23  Resolved: 10/Oct/17

Status: Closed
Project: Magnolia REST Framework
Component/s: None
Affects Version/s: 2.0
Fix Version/s: 2.0

Type: Improvement Priority: Neutral
Reporter: Sang Ngo Huu Assignee: Dai Ha
Resolution: Done Votes: 1
Labels: None
Remaining Estimate: 0d
Time Spent: 7.5h
Original Estimate: 1d

Issue Links:
causality
caused by MGNLREST-110 Implement improved REST roles Closed
relation
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Date of First Response:
Epic Link: REST Headless bundle
Sprint: Saigon 116, Saigon 117
Story Points: 3

 Description   

anonymous can use the delivery endpoint, but results will be empty, unless anonymous has ACLs to the target workspaces.



 Comments   
Comment by Christopher Zimmermann [ 22/Sep/17 ]

I think this is necessary to solve in order to achieve "Easy Setup": https://wiki.magnolia-cms.com/display/TH2/Easy+Rest+Endpoints+Stories#EasyRestEndpointsStories-REST:Easysetup

Comment by Mikaël Geljić [ 03/Oct/17 ]

simple proposal approved:

  • add a flag in endpoint config (resp. WorkspaceParameters)
  • bypassWorkspaceAcls
  • false by default, to make it a conscious decision

If bypassed, request is processed in SystemContext (like other endpoints btw).

Generated at Mon Feb 12 06:56:44 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.