[
https://issues.apache.org/jira/browse/SLING-10169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17295140#comment-17295140
]
Robert Munteanu commented on SLING-10169:
-----------------------------------------
PR at https://github.com/apache/sling-org-apache-sling-servlets-post/pull/12
applied, thanks [~sdumitriu]!
> Enabling servlet.post.autoCheckout breaks POST requests when one of the
> ancestor nodes is not accessible
> --------------------------------------------------------------------------------------------------------
>
> Key: SLING-10169
> URL: https://issues.apache.org/jira/browse/SLING-10169
> Project: Sling
> Issue Type: Bug
> Components: Servlets
> Affects Versions: Servlets Post 2.3.36
> Reporter: Sergiu Dumitriu
> Assignee: Robert Munteanu
> Priority: Major
> Fix For: Servlets POST 2.4.4
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> Example:
> - enable servlet.post.autoCheckout
> - create a non-admin user
> - deny access to / (the root node)
> - allow access to /content
> - try to post new content
> - request fails with 500 Server Error because findVersionableAncestor fails
> to handle the AccessDeniedException thrown when trying to access the parent
> of /content
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
