-
Type: Bug
-
Status: Resolved
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: arender-2.0.0
-
Component/s: ARender
-
Tags:
-
Team:PLATFORM
-
Sprint:nxplatform #42
-
Story Points:2
Scenario to reproduce
- create two users: userA and userB
- create a document with Write permission for userA and block access to userB
- open document in NEV with userA + copy the link to access NEV, it should look like https://previewer.apps.prod.nuxeo.io/?documentId=default,docUUID,file:content,blobDigest
- in another browser, open the link above with userB
UserB is able to print the document whereas it shouldn't.
Identified cause
Even if the user is not able to see the document, it can print the document. This is due to the presence of the document in the NEV cache.