Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-14663 Improve UserWorkspace
  3. NXP-14665

In multi-tenant mode the UserWorkspace root should not be world readable.

    XMLWordPrintable

    Details

      Description

      As explained in SUPNXP-10622, when the multi-tenant mode is activated, the ACL we set on the UserWorkspace is not what it should be.

      Typically :

      <entry principal="Everyone" permission="Read" grant="true"/>
      

      Should be narrowed to a tenant group.

        Attachments

          Activity

            People

            • Assignee:
              tdelprat Thierry Delprat
              Reporter:
              tdelprat Thierry Delprat
              Participants:
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: