[PAGES-1325] info.magnolia.rendering.spa.rest.v2.JcrPagesDeliveryEndpoint#createMissingAreaNodes function in should be executed in system context Created: 31/Aug/23 Updated: 25/Oct/23 Resolved: 13/Sep/23 |
|
| Status: | Closed |
| Project: | Magnolia pages module |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | 6.3.0, 6.2.31 |
| Type: | Bug | Priority: | Neutral |
| Reporter: | Riste Drangovski | Assignee: | Dai Ha |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Σ Remaining Estimate: | 0d | Remaining Estimate: | 0d |
| Σ Time Spent: | 1d 2.5h | Time Spent: | 1d 2.5h |
| Σ Original Estimate: | Not Specified | Original Estimate: | Not Specified |
| Attachments: |
|
|||||||||||||||||||||||||
| Issue Links: |
|
|||||||||||||||||||||||||
| Sub-Tasks: |
|
|||||||||||||||||||||||||
| Template: |
|
|||||||||||||||||||||||||
| Acceptance criteria: |
Empty
|
|||||||||||||||||||||||||
| Task DoD: |
[X]*
Doc/release notes changes? Comment present?
[X]*
Downstream builds green?
[X]*
Solution information and context easily available?
[X]*
Tests
[X]*
FixVersion filled and not yet released
[ ] 
Architecture Decision Record (ADR)
|
|||||||||||||||||||||||||
| Bug DoR: |
[ ]*
Steps to reproduce, expected, and actual results filled
[ ]*
Affected version filled
|
|||||||||||||||||||||||||
| Release notes required: |
Yes
|
|||||||||||||||||||||||||
| Date of First Response: | ||||||||||||||||||||||||||
| Epic Link: | Support | |||||||||||||||||||||||||
| Sprint: | DevX 46 | |||||||||||||||||||||||||
| Story Points: | 3 | |||||||||||||||||||||||||
| Team: | ||||||||||||||||||||||||||
| Work Started: | ||||||||||||||||||||||||||
| Approved: |
Yes
|
|||||||||||||||||||||||||
| Description |
|
info.magnolia.rendering.spa.rest.v2.JcrPagesDeliveryEndpoint#createMissingAreaNodes should be executed in system context, because this function adds missing inherited nodes if you don't set bypassWorkspaceAcls=true in delivery endpoint definition, then you need to add write permission to the anonymous user so that missing area nodes can be created! |
| Comments |
| Comment by Riste Drangovski [ 31/Aug/23 ] |
|
this is also a problem for autogenerated components, because autogenerated components should be created when REST API is called directly! |
| Comment by Dai Ha [ 07/Sep/23 ] |
|
Discovery result: |
| Comment by Riste Drangovski [ 14/Sep/23 ] |
|
looks good, thx |