Uploaded image for project: '[Read Only] - Hippo Repository'
  1. [Read Only] - Hippo Repository
  2. REPO-1429

When a new nodetype gets added, the authorization query does not account for this, resulting in already logged in sessions not finding the new nodetype with a search

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Top
    • Resolution: Fixed
    • None
    • 4.0.0
    • None

    Description

      Reproduction in cms as follows:
      1) Log in a 'editor'
      2) Do a search on 'test'
      3) Log in in different browser as admin. Add a new document type and add a document of this type with content 'test'
      4) assert that if you search with 'admin' you can find the document in the cms
      5) assert that with 'editor' you do not find the document
      When the editor logs out and in again, the document will be found by a search. This is because for a new session, a new authorization query is created taking the new nodetype into account in the authorization query.

      For reproduction in site, see HSTTWO-3585 with the ?_nodetype=myhippoproject:newtype

      Attachments

        Issue Links

          Activity

            People

              adouma Ate Douma
              aschrijvers Ard Schrijvers
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: