search

enonic / xp-apps

Enonic XP bundled applications.
GNU General Public License v3.0
1 stars 3 forks source link

Version History Panel - button 'restore this version' should be disabled, when user has no rights for the content #615

Closed sgauruseu closed 6 years ago

sgauruseu commented 6 years ago
  1. Create new user.
  2. Login with the user and select any content that is read-only for the user
  3. Open Version History panel and try to restore one of the versions:
vers

Bug: 500 error appears in the console and Exception in the server.log com.enonic.xp.node.NodeAccessException: Access denied to [/content/superhero] for [MODIFY] by user [user:system:su2] ''su2'' at com.enonic.xp.repo.impl.node.NodePermissionsResolver.doRequireContextUserPermission(NodePermissionsResolver.java:43) at com.enonic.xp.repo.impl.node.NodePermissionsResolver.requireContextUserPermissionOrAdmin(NodePermissionsResolver.java:29)