-
Type: Bug
-
Status: Resolved
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: 8.10, 9.1-SNAPSHOT
-
Component/s: Automation
-
Backlog priority:600
-
Upgrade notes:
-
Sprint:NOS 9.1.5
-
Story Points:3
- create the following chain:
- Context.FetchDocument - Document.AddPermission: permission: Read username: kvjeniozernofiuzehrt acl: local blockInheritance: "false" notify: "false"
- create a button in User actions to trigger the chain on a current document
- synchronize the project with Nuxeo server
- check there is no user named kvjeniozernofiuzehrt
- create a Document
- trigger the chain
- check the permission tab, a Read permission has been give to user kvjeniozernofiuzehrt
This is actually done here:
https://github.com/nuxeo/nuxeo/blob/master/nuxeo-features/nuxeo-automation/nuxeo-automation-core/src/main/java/org/nuxeo/ecm/automation/core/operations/document/AddPermission.java
The code does not check that the username corresponds to an entry in the user directory. Same problem for group directory as well.
- is related to
-
NXP-21889 Unable to add ACL on a document with a computed group and virtual user
- Resolved