eXist-db / node-exist

Interact with eXist DB instances via XML-RPC and REST
MIT License
17 stars 6 forks source link

`exist-ls --extended` cannot read permissions of restricted collection #217

Closed line-o closed 2 years ago

line-o commented 2 years ago

When exist-ls tries to read permissions on a collection the current user is not allowed to access it will throw an error and stop.

Steps to reproduce

run

EXISTDB_USER=guest \
EXISTDB_PASS=guest \
exist-ls --extended /db/system

The above will return

exerr:ERROR Permission to retrieve permissions is denied for user 'guest' on '/db/system/security': Permission denied to open collection: /db/system/security by guest

refs https://github.com/eXist-db/exist/issues/4240

line-o commented 2 years ago

It is unclear if this is something we can fix in node-exist or if we have to work around the limitation imposed by existdb.

line-o commented 2 years ago

The successor https://github.com/line-o/xst will now exclude entries that the current user has no access to.