[
http://jira.nuxeo.org/browse/NXP-3702?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anahide Tchertchian updated NXP-3702:
-------------------------------------
Attachment: services-NXP-3702.txt
dm-NXP-3702.txt
attached diff for remaining problem: once authentication page is shown, it's
not possible anymore to try to access another url because the previous url is
in a variable in session.
This variable is in session so that redirection is good after user logs in.
=> made changes to not fill this variable in session in case of an
authentication problem with anymous user, and pass this url as argument in the
login form.
This is testes by an addon (see NXP-4117) but need to check if it does not
break the cas login mechanism.
> Redirect to login page when logged as anonymous user and navigating to an
> existing document without access rights
> -----------------------------------------------------------------------------------------------------------------
>
> Key: NXP-3702
> URL: http://jira.nuxeo.org/browse/NXP-3702
> Project: Nuxeo Enterprise Platform
> Issue Type: Bug
> Affects Versions: 5.2 GA
> Reporter: Anahide Tchertchian
> Assignee: Anahide Tchertchian
> Fix For: 5.3
>
> Attachments: dm-NXP-3702.txt, services-NXP-3702.txt
>
> Original Estimate: 1 day
> Remaining Estimate: 1 day
>
> When navigating directly to a document, logged as anonymous user, if document
> exists and user has no read rights on it, the security exception should
> trigger view of the login page (or at least show a page with a security
> exception).
> An exception is thrown instead, saying "Page not found" => rest url system is
> broken when anonymous login is used.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
