Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-13450

nuxeo filters wrong treat permissions

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: 6.0
    • Component/s: Core

      Description

      An user with Everything permission can not unlock a document locked by another user.
      It is caused by a <permission> rule in the "can_unlock" filter, which is Write.
      It means, that the filter checks the current permission, but should general.

      Of course, it is easy to bypass.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: