Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23643

Search with permissions off results in UnauthorizedException

    Details

      Description

      After refactoring of SearchService for performance, turning off permission filtering via $filterOnUserPermissions now throws UnauthorizedException because of loadContent use.

      The reason this was not caught was because the integration tests testing this has been disabled for a long time (since search was moved from Content Service, so pre 5.0). Found when fixing skipped tests.

        Issue Links

          Activity

          Show
          André Rømcke added a comment - PR: https://github.com/ezsystems/ezpublish-kernel/pull/1090
          Show
          André Rømcke added a comment - Merged: https://github.com/ezsystems/ezpublish-kernel/commit/bee53ade0b28f5d9e9863cbefbfd37d349867c98
          Show
          André Rømcke added a comment - 5.4: https://github.com/ezsystems/ezpublish-kernel-ee/commit/e0efdc326c0073ffaac78d9e3eedd20a3124c9f5 https://github.com/ezsystems/ezpublish-kernel-ee/commit/1605fa7f3fcde18f5c5b35f973c0a690ba15510b 5.3: https://github.com/ezsystems/ezpublish-kernel-ee/commit/3d1eee29fa29c8332b1f88280eb1612366190bff https://github.com/ezsystems/ezpublish-kernel-ee/commit/124939faeaf055f47f8161c9c27cea24e9d81470
          Hide
          André Rømcke added a comment - - edited

          This is what the issue is about, default is true, meaning it is on. but off is possible by setting it to false like you do, so afaik you get the exact same issue as issue described (now after fixing the description mistake), the title was correct to begin with.

          Show
          André Rømcke added a comment - - edited This is what the issue is about, default is true, meaning it is on. but off is possible by setting it to false like you do, so afaik you get the exact same issue as issue described (now after fixing the description mistake), the title was correct to begin with.
          Hide
          Eduardo Fernandes (Inactive) added a comment -

          QA Tested and Approved

          Show
          Eduardo Fernandes (Inactive) added a comment - QA Tested and Approved

            People

            • Assignee:
              Unassigned
              Reporter:
              André Rømcke
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: