[MGNLUI-1387] Security and Config apps available for non-superuser Created: 17/May/13  Updated: 18/Jun/13  Resolved: 17/Jun/13

Status: Closed
Project: Magnolia UI
Component/s: configuration, security app
Affects Version/s: 5.0
Fix Version/s: 5.0

Type: Bug Priority: Critical
Reporter: Jozef Chocholacek Assignee: Jozef Chocholacek
Resolution: Fixed Votes: 0
Labels: security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[ ]* Steps to reproduce, expected, and actual results filled
[ ]* Affected version filled
Sprint: RC 2

 Description   

Normal (non-superuser) user sees the Security and Config app icons and can start them:

Config App

The user does not see anything, but can click 'Add Folder' action. This leads to an 'Access denied' error and is not nice.

Security App

When the user tries to start this app, the UI goes broken/frozen (even clicking the Apps/Pulse/Favorites icons does not help) and the only help is to use the restartApplication URL parameter.
Also it writes some errors to the log:

2013-05-17 13:40:32,305 WARN  agnolia.ui.workbench.tree.HierarchicalJcrContainer: Cannot retrieve root item id's: javax.jcr.PathNotFoundException: /admin
2013-05-17 13:40:32,305 WARN  agnolia.ui.workbench.tree.HierarchicalJcrContainer: Cannot determine depth of jcr item: javax.jcr.PathNotFoundException: /admin
2013-05-17 13:40:32,306 WARN  info.magnolia.event.SimpleEventBus                : Exception caught when dispatching event: null
java.lang.NullPointerException
	at info.magnolia.ui.vaadin.integration.jcr.JcrItemUtil.getItemId(JcrItemUtil.java:114)
        ...

Generated at Mon Feb 12 08:46:05 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.