Details

      Description

      content/history runs through all objectversions and calls eZContentObjectVersion::checkAccess for versionremove.

      If checking User_Subtree/Subtree limitated policies the pathstring of the published Objectversion is compared to the SubtreeLimitation String. If that not grants access the parentnodes pathstring of the ObjectVersion is checked. If a parentobject of an old Version does not longer exists because it has been deleted and the Object itself has moved to another parent node eZ could not fetch the old parentNode and dies with fatal error.

      I patched it for a customer. Patch is attached.

      Steps to reproduce

      Create Nodes under Home:
      Folder A
      Folder B
      Folder C
      Create a role author with login access an content/all functions
      Assign the role to an user with Subtree Limitation to Folder A and B and C

      author: Create an article under Folder B
      author: Edit Version2 of article under Folder B
      admin: move article to Folder C
      admin: Delete Folder B
      author: Edit article and go to version history.

      eZ crashes because Folder B is no more available.

        Activity

        Hide
        Disabled User added a comment -

        version_view_patch.diff content history patch

        Show
        Disabled User added a comment - version_view_patch.diff content history patch
        Hide
        Disabled User added a comment -


        Thanks for your attention !

        Show
        Disabled User added a comment - Thanks for your attention !
        Hide
        ezrobot added a comment -

        This issue has been automatically closed due to the lack of activity over a long period of time. It is very likely that it is obsolete, but if you think it is still valid, do not hesitate to reopen it and mention why.

        Show
        ezrobot added a comment - This issue has been automatically closed due to the lack of activity over a long period of time. It is very likely that it is obsolete, but if you think it is still valid, do not hesitate to reopen it and mention why.

          People

          • Assignee:
            unknown
            Reporter:
            Disabled User
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated: