Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-16766

Users can see domain they don't have access to in the Publish tab

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 6.0-HF15, 7.3
    • Component/s: Publishing

      Description

      When listing the publication trees, there is no check done on the Domain linked to the publication tree: an user can see domain title even if he does not have READ access to the domain.

      If the publication tree is linked to a Domain, check the READ permission before accepting the tree.

      If there are publication targets set on the Workspace, before accepting a publication tree, check that there is at least one publication target with READ permission on the Domain linked to the tree.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  PagerDuty

                  Error rendering 'com.pagerduty.jira-server-plugin:PagerDuty'. Please contact your Jira administrators.