-
Type: Bug
-
Status: Resolved
-
Priority: Major
-
Resolution: Won't Fix
-
Affects Version/s: 2021.0
-
Component/s: Notifications
-
Release Notes Summary:notification.check.read.permission conf property can be set to true to achieve this
-
Tags:
-
Backlog priority:800
-
Sprint:nxplatform #114
-
Story Points:3
Steps to reproduce:
- Create a user jane who belongs to the "members" group
- Create a Workspace named "WS Test" under Default domain > Workspaces
- Create a Workspace named "Private" under Default domain > Workspaces > WS Test
- Block rights inheritance on the Private workspace
- Log in as "jane"
- Navigate to Default domain > Workspaces > WS Test
- Click on the "Notify me" button
- Log in as "Administrator"
- Create a Note under Default domain > Workspaces > WS Test > Private
- Observe that jane has received a notification for the newly created note
- If jane is logged in and clicks on the link to the document in the email, she'll received an error "403 Permission Denied Privilege 'Read' is not granted to 'jane'"
Expected behavior: the notification should not be sent to jane because she does not have the sufficient permission to see the document
- is related to
-
NXP-12332 Make permission checks before sending a notification not the default behavior
- Resolved