Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-27744

401 status when viewing objects with a user that has authorization to read all content

    Details

    • Type: Bug Bug
    • Status: Confirmed
    • Priority: High High
    • Resolution: Unresolved
    • Affects Version/s: 1.7.4, 1.11.0, 1.10.1
    • Fix Version/s: QA tracked issues
    • Labels:
    • Environment:

      Operating System: Debian 8
      PHP Version: 5.6.30-0+deb8u1
      Database and version: Mysql 5.5.54-0+deb8u1
      Browser (and version): Firefox 54
      Env: Prod

      Description

      Steps to Reproduce

      -Create one folder "Folder1"
      -Create one role with the following policies:

      Module Function Limitation
      user login No limitations
      content read No limitations
      content versionread No limitations
      content create No limitations
      content publish No limitations

      -Create one user and assign it to the previously created role
      -Logout and login using the new user credentials
      -Open your developer tools or similar tool
      -Now try to view "Folder1"

      I can view it, but I have a 401 error. The error I have in dev tools is

      errorCode	401
      errorMessage	"Unauthorized"
      errorDescription	"User does not have access to 'view' 'section'"
      

      When I look into "Details" tab, "Section Details" , the section details information is empty.

      Note1: Even if I now try to create another object (Folder2), i still have the same error when viewing it.
      Note2: This does not happen

        Issue Links

          Activity

          Paulo Nunes (Inactive) created issue -
          Paulo Nunes (Inactive) made changes -
          Field Original Value New Value
          Status Open [ 1 ] Confirmed [ 10037 ]
          Paulo Nunes (Inactive) made changes -
          Link This issue discovered while testing EZP-27097 [ EZP-27097 ]
          Paulo Nunes (Inactive) made changes -
          Affects Version/s 1.11.0-beta1 [ 14801 ]
          Alex Schuster made changes -
          Workflow EZ* Development Workflow [ 104843 ] EZEE Development Workflow [ 108841 ]

            People

            • Assignee:
              Unassigned
              Reporter:
              Paulo Nunes (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: