Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-24071

Can't browse document tree as User with limited permissions

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Not A Bug
    • Affects Version/s: 9.10
    • Fix Version/s: 10.1
    • Component/s: Web UI
    • Tags:
    • Sprint:
      nxGang Sprint 10.1.3

      Description

      Using Rest API:

      • Create several users
      • Create a Domain, Domain-1 containing a workspace with a folder and several files.
      • Grant permissions to users:
        • user1 has readonly permission on Domain-1
        • user2 has readwrite permission on Domain-1
        • user3 is a poweruser with everything permission on Domain-1

      Using Web UI:

      • Login to Nuxeo as Administrator
      • Navigate to different Domains, Folders and documents and verify that the permissions were properly attributed
      • Log out and log in as user1 (Read-only on Domain-1)
      • Click on Browse
        => "There are no items to display in this location." is displayed in the browse drawer.
        => I can only access documents visible from the Recently Edited panel (which does not contain all the documents to which I have Read permission).
      • Click on any document under "Recently Edited" from the dashboard, and the browse tree appears.
      • Log out and log in as user2 (ReadWrite permission on Domain-1)
      • Click on Browse
        => "There are no items to display in this location." is displayed in the browse drawer.
        => Since I cannot browse to any of the documents or folders to which I have ReadWrite permission, I cannot create any documents.
        => I can only access documents visible from the Recently Edited panel (which does not contain all the documents to which I have ReadWrite permission).
      • Click on any document under "Recently Edited" from the dashboard, and the browse tree appears.
      • Log out and log in as user2 (poweruser with Everything permission on Domain-1)
      • Click on Browse
        => "There are no items to display in this location." is displayed in the browse drawer.
        => Since I cannot browse to any of the documents or folders to which I have Everything permission, I cannot create any documents.
        => I can only access documents visible from the Recently Edited panel (which does not contain all the documents to which I have Everything permission).
      • Click on any document under "Recently Edited" from the dashboard, and the browse tree appears.

      Refreshing the page, even several times, does not solve the problem.

      Expected behavior:

      • I should not have to click on a random document to be able to access other documents for which I already have permissions.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 20 minutes
                20m