Uploaded image for project: 'CMS'
  1. CMS
  2. CMS-8026

Issue when checking read access on contents for search

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Critical Critical
    • 4.0RC3
    • None
    • None
    • None

      The search on content returns no result as soon as I belong to a group

      How to reproduce

      • I am in a data (no-web) application
      • My user belong to no group
      • Search on contents returns all contents
      • I create a SQL group and add my user into the group
      • Search now returns no contents
      • If I remove my user from the group, the search works fine

      The read access condition in Solr query is :

      • when my user belong to a group (KO)
      (aclReadAllowAnonymous:true   OR (aclReadAllowAnyConnectedUser:true     AND (*:* -((aclReadDeniedUsers:(ideo#ideo\-users)         OR (aclReadDeniedGroups:(1#mes\-groupes) AND (*:* -aclReadAllowedUsers:(ideo#ideo\-users)))        ))))         OR ((aclReadAllowedGroups:(1#mes\-groupes) AND -aclReadDeniedGroups:(1#mes\-groupes)         AND (*:* -aclReadDeniedUsers:(ideo#ideo\-users)))         OR (aclReadAllowedUsers:(ideo#ideo\-users) AND (*:* -aclReadDeniedUsers:(ideo#ideo\-users)))))
      • when my user has no group (OK)
      (aclReadAllowAnonymous:true OR (aclReadAllowAnyConnectedUser:true AND (*:* -((aclReadDeniedUsers:(ideo#ideo\-users) OR ((*:* -aclReadAllowedUsers:(ideo#ideo\-users))))))) OR (((*:* -aclReadDeniedUsers:(ideo#ideo\-users))) OR (aclReadAllowedUsers:(ideo#ideo\-users) AND (*:* -aclReadDeniedUsers:(ideo#ideo\-users)))))

      Note that the READER profil is never setted, but I can see all contents ..

            sprieul Simon Prieul (Inactive)
            laurence Laurence Aumeunier
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: