Details
-
Bug
-
Resolution: Unresolved
-
High
-
1.7.4, 1.11.0, 1.10.1
-
Operating System: Debian 8
PHP Version: 5.6.30-0+deb8u1
Database and version: Mysql 5.5.54-0+deb8u1
Browser (and version): Firefox 54
Env: Prod
Description
Steps to Reproduce
-Create one folder "Folder1"
-Create one role with the following policies:
Module | Function | Limitation |
---|---|---|
user | login | No limitations |
content | read | No limitations |
content | versionread | No limitations |
content | create | No limitations |
content | publish | No limitations |
-Create one user and assign it to the previously created role
-Logout and login using the new user credentials
-Open your developer tools or similar tool
-Now try to view "Folder1"
I can view it, but I have a 401 error. The error I have in dev tools is
errorCode 401 errorMessage "Unauthorized" errorDescription "User does not have access to 'view' 'section'"
When I look into "Details" tab, "Section Details" , the section details information is empty.
Note1: Even if I now try to create another object (Folder2), i still have the same error when viewing it.
Note2: This does not happen
Attachments
Issue Links
- discovered while testing
-
EZP-27097 Can't copy objects to an authorized location limited by policies
- Closed