When a tag (in the tag cloud) has at least one document that the user does not have access to, an error is raised when you try and navigate to the results.
This error is found in the logs
SEVERE: Error Rendering View[/search/tag_search_results.xhtml] org.nuxeo.ecm.core.api.DocumentSecurityException: Privilege 'Read' is not granted to 'tm' at org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSession.java:204) at org.nuxeo.ecm.core.api.AbstractSession.getDocument(AbstractSession.java:939) at org.nuxeo.ecm.platform.tag.web.TagActionsBean.getChildrenSelectModel(TagActionsBean.java:244)
And TagActionsBean#getChildrenSelectModel does not seem to check if the current user has Read permission on the documents in the results.
Maybe it could be a good opportunity to migrate the tag results to a content view: NXP-10003
- depends on
-
NXP-10003 Migrate tag search results to content view
-
- Resolved
-
