-
Bug
-
Resolution: Unresolved
-
Major
-
4.8.12, 4.9.0
-
None
-
None
A user can have access to the Content thread tool on some content and not others.
When selecting a content where I have no right, the following error occurs :
The user UserIdentity [login=mag, population=ldap] tried to access the callable method [public java.util.List<java.util.Map<java.lang.String, java.lang.Object>> org.ametys.cms.repository.comment.contributor.ui.ContentThreadClientSideElement.getThread(java.lang.String)] without sufficient rights org.ametys.runtime.authentication.AccessDeniedException: The user UserIdentity [login=mag, population=ldap] tried to access the callable method [public java.util.List<java.util.Map<java.lang.String, java.lang.Object>> org.ametys.cms.repository.comment.contributor.ui.ContentThreadClientSideElement.getThread(java.lang.String)] without sufficient rights
The tool should check if the user has sufficient rights before calling the callable or handle this error gracefully.
See the history tool for exemple that display a label indicating insufficient right on selection
- discovered while testing
-
CMS-12432 History tool failed with an user with contributor rights
-
- Resolved
-