topic security issue in Alfresco Archive

security issue

pmarreddy — Sat, 07 Jan 2006 15:33:14 GMT

hi,i have created a node with user: admin and tryed to access it using user: user1, i am able to access it, even when i set to read permission to false. accoring to the wiki the "on the NodeService bean, the readProperties method checks that the current user has read access to the properties of the

Re: security issue

andy — Mon, 09 Jan 2006 10:11:44 GMT

Hi

It would help to know the repository version and what you are doing.

If you are using version 1.1.1 you need to use version 1.1.2 to fix a security issue about permission enforcement.

If you are using the 1.0 open version, permissions were not included in this release.

If you are using the API direct, only the public service beans apply permission. There are two versions of these public beans. For example, "nodeService" and "NodeService". "nodeService" does not apply security, it is wrapped by "NodeService" which applies security. The same pattern applies to "searchService" and "SearchService".

Regards

Andy

Re: security issue

pmarreddy — Mon, 09 Jan 2006 16:49:14 GMT

thank u for ur promt reply.

prasanth