[
https://issues.apache.org/jira/browse/NIFI-1497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15152991#comment-15152991
]
Bryan Bende commented on NIFI-1497:
-----------------------------------
Been reviewing this... after applying the patch and running some tests, it
appears that this patch introduced a regression allowing content to be
incorrectly accessed through the content viewer.
> Access token not included in all requests
> -----------------------------------------
>
> Key: NIFI-1497
> URL: https://issues.apache.org/jira/browse/NIFI-1497
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core UI
> Reporter: Matt Gilman
> Assignee: Matt Gilman
> Fix For: 0.5.1
>
> Attachments: 0001-NIFI-1497.patch
>
>
> Some requests do not have the access token included with them (specifically
> custom UIs and view content). Without the access token, the request will fail
> with Access Denied.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)