SenseNet / sensenet

Open Source Content Services Platform written in .NET
https://sensenet.com
GNU General Public License v2.0
173 stars 112 forks source link

[BUG?]Visitor need to have see permission on itself to get children of a public content #870

Closed herflis closed 4 years ago

herflis commented 4 years ago

If you want to publish children of a content for everyone even for visitors you are unable to do it with giving the Visitor open on the container and runapp on the Browse application.

https://docs.service.sensenet.com/OData.svc/Root/Content('docs')?$select=DisplayName&metadata=no

{
  "d": {
    "DisplayName": "docs"
  }
}

https://docs.service.sensenet.com/OData.svc/Root/Content/docs

{
  "error": {
    "code": "NotSpecified",
    "exceptiontype": "SenseNetSecurityException",
    "message": {
      "lang": "en-us",
      "value": "Access denied."
    },
    "innererror": null
  }
}

I've checked the error in the eventviewer: image Access denied. Path: /Root/IMS/BuiltIn/Portal/Visitor PermissionType: See User: BuiltIn\Visitor

After giving see permission for the Visitor everything works like charm.

Please allow see permission for Visitor user on itself somewhere in the core product install/import

tusmester commented 4 years ago

Done in #1039