-
Type: Bug
-
Status: Resolved
-
Priority: Critical
-
Resolution: Fixed
-
Affects Version/s: 9.1
-
Component/s: Elasticsearch
-
Release Notes Summary:The search works for users who do not belong to the members group
-
Backlog priority:1,150
-
Sprint:nxcore 9.3.6, nxcore 9.3.10
-
Story Points:3
If a user is not an admin nor part of "members", then search don't work (no results) even if the user has read permission on documents.
Once you add that user to members, then search returns the documents for which the user has read permission
How to reproduce:
- create a group 'consumers'
- create a user 'mika' and add it to consumers but not members
- set read permission for consumers on the root document
- log in with mika
- you can browse the repository but search (jsf or webui) does not return any results
- when adding permissions to the user or group locally, on a test workspace for instance, works correctly
- when removing these local permissions, it still works correctly (as if problem has been fixed by local permissions addition and removal)