A bug?

[lexxborg]

Hi guys,

there are some documents, that have no read access for the guest authority, following they are not listed in content items list.
In some other space there are links to those documents, and the guest authority has read access to this links. Each time when I try to switch to this space with the links I get a system error:

javax.faces.FacesException: Cannot get value for expression '#{r.url}'
caused by:
org.apache.jasper.JasperException: Cannot get value for expression '#{r.url}'
caused by:
javax.faces.el.EvaluationException: Cannot get value for expression '#{r.url}'
caused by:
javax.faces.el.EvaluationException: org.alfresco.web.bean.repository.MapNode
caused by:
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.
caused by:
net.sf.acegisecurity.AccessDeniedException: Access is denied.


It seems to be a bug, because if you have no right to read the document, you must not have the right to read the links to this documents as well, or the rights from link should be mapped temporary to the document.


Please correct me if I’m wrong.


Regards
LeXx

[kevinr]

Correct it is, or rather was a bug - it has been fixed in 2.1Enterprise - it was merged over to community last night - so should appear in tonights nightly build (or right now in the public SVN).

Thanks,

Kevin

[blega]

Could you give the associated issue id ?

It seems I have the problem with Alfresco 2.1 community (downloaded from sourceforge)

Have a nice day,
Bertrand.

[kevinr]

The problem will be in 2.1 community - it was merged after that release. If you download one of the 2.9 builds or SVN code directly it has been fixed. I can't find the issue - some searching in JIRA will be needed

Kev

[blega]

I searched jira for any occurrence of different parts
of the stack trace without any result.

I got the svn log for the sept 11, 2007. The truth is that a lot of files
were updated that day.

Is there by any chance a 2.1 community final release ?
Having no branch in the subversion repository, the separation between
the ongoing 2.9 developments and the 2.1 bug fixes is not very clear.
Do you have any subversion revision for 2.1 community with most of the
2.1 bug fixes ?

Do I have to look for the last commit with label "Merged V2.1 to HEAD" and take it
as the 2.1 community final release ?

What is the safest way to get the bug fixes for the 2.1 community release ?

Have a nice day,
Bertrand.