Sergiu Dumitriu created SLING-10169:
---------------------------------------

             Summary: Enabling servlet.post.autoCheckout breaks POST requests 
when one of the ancestor nodes is not accessible
                 Key: SLING-10169
                 URL: https://issues.apache.org/jira/browse/SLING-10169
             Project: Sling
          Issue Type: Bug
          Components: Servlets
    Affects Versions: Servlets Post 2.3.36
            Reporter: Sergiu Dumitriu


Example:
- enable servlet.post.autoCheckout
- create a non-admin user
- deny access to / (the root node)
- allow access to /content
- try to post new content
- request fails with 500 Server Error because findVersionableAncestor fails to 
handle the AccessDeniedException thrown when trying to access the parent of 
/content



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to