-
Bug
-
Resolution: Fixed
-
Major
-
4.8.10, 4.9.0
-
None
-
None
-
4.9.0 M9
-
Oui
The workspace switched access controller is unnecessary and leads to erronnous result in web contexts.
It is unnecessary because it allow to read stored data with a different prefix than the requested prefix. But this is already possible by converting the original context (thanks to a StringRightContextConvertor) before call the controllers a thus leaving the handling of reading the related storage to the WorkspaceAccessController.
It leads to erronous result in web context because when looking if we have any right on workspace, we look at the root and all the children. By converting the root /web to /cms it ends up looking at any context starting with /cms potentially find assignment on /cms/<siteName> from a different sitename than the current.
- Conditionne
-
RUNTIME-58 Visualisation d'un profil
-
- Resolved
-
- discovered while testing
-
-
- Resolved
-
