Details
-
Bug
-
Status: Closed
-
Top
-
Resolution: Fixed
-
None
-
None
Description
Reproduction in cms as follows:
1) Log in a 'editor'
2) Do a search on 'test'
3) Log in in different browser as admin. Add a new document type and add a document of this type with content 'test'
4) assert that if you search with 'admin' you can find the document in the cms
5) assert that with 'editor' you do not find the document
When the editor logs out and in again, the document will be found by a search. This is because for a new session, a new authorization query is created taking the new nodetype into account in the authorization query.
For reproduction in site, see HSTTWO-3585 with the ?_nodetype=myhippoproject:newtype
Attachments
Issue Links
- causes
-
HSTTWO-3585 Documents not exposed when created in new content type based on basedocument
- Closed
- is cloned by
-
REPO-1431 [Backport 3.2.1] When a new nodetype gets added, the authorization query does not account for this, resulting in already logged in sessions not finding the new nodetype with a search
- Closed
- relates to
-
REPO-2217 Class instances other than SessionImplHelper should never keep a AuthorizationQuery reference themselves
- Closed