Fix authentication error when looking at history tab without rights
-------------------------------------------------------------------
Key: NXP-4073
URL: http://jira.nuxeo.org/browse/NXP-4073
Project: Nuxeo Enterprise Platform
Issue Type: Bug
Affects Versions: 5.2 GA
Reporter: Anahide Tchertchian
Assignee: Thierry Delprat
Fix For: 5.3
Anonymous users can view the "history" tab of a published document. When
clicking on it, if they don't have access to workspaces, an error occurs
printing "You must be authenticated to perform this operation".
stack trace is:
Caused by: org.nuxeo.ecm.platform.audit.api.AuditException: An error occurred
while grabbing log entries for 097ec687-bb8f-4497-a7dc-05689370a2e0
at
org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:191)
at
org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.seam.util.Reflections.invoke(Reflections.java:21)
at
org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:31)
at
org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56)
at
org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:31)
at
org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
at
org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:46)
at
org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
at
org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:42)
at
org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
at
org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107)
at
org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:166)
at
org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:102)
at
org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean_$$_javassist_66.computeLogEntries(ContentHistoryActionsBean_$$_javassist_66.java)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.seam.util.Reflections.invoke(Reflections.java:21)
at org.jboss.seam.util.Reflections.invokeAndWrap(Reflections.java:125)
... 87 more
Caused by: org.nuxeo.ecm.core.api.WrappedException: Exception:
org.nuxeo.ecm.core.api.RollbackClientException. message:
org.nuxeo.ecm.core.api.WrappedException: Exception:
org.nuxeo.ecm.core.api.DocumentSecurityException. message: Privilege 'Version'
is not granted to 'Guest'
at
org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getSourceDocument(DocumentManagerBean.java:517)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
...
at
org.jboss.ejb3.security.Ejb3AuthenticationInterceptor.invoke(Ejb3AuthenticationInterceptor.java:110)
at
org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
at
org.jboss.ejb3.ENCPropagationInterceptor.invoke(ENCPropagationInterceptor.java:46)
at
org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
at
org.jboss.ejb3.asynchronous.AsynchronousInterceptor.invoke(AsynchronousInterceptor.java:106)
at
org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
at
org.jboss.ejb3.stateful.StatefulContainer.localInvoke(StatefulContainer.java:206)
at
org.jboss.ejb3.stateful.StatefulLocalProxy.invoke(StatefulLocalProxy.java:119)
at $Proxy221.getSourceDocument(Unknown Source)
at
org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:178)
... 111 more
Caused by: org.nuxeo.ecm.core.api.WrappedException: Exception:
org.nuxeo.ecm.core.api.DocumentSecurityException. message: Privilege 'Version'
is not granted to 'Guest'
at
org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSession.java:293)
at
org.nuxeo.ecm.core.api.AbstractSession.getSourceDocument(AbstractSession.java:1791)
at
org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getSourceDocument(DocumentManagerBean.java:515)
... 148 more
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
