[ 
https://issues.apache.org/jira/browse/SLING-6703?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15938585#comment-15938585
 ] 

Konrad Windszus edited comment on SLING-6703 at 3/23/17 3:40 PM:
-----------------------------------------------------------------

Also I don't quite get why for the example from 
https://issues.apache.org/jira/browse/SLING-4415?focusedCommentId=14510911&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14510911
 the path is exposed, because always the request's resource resolver is being 
used (even to resolve the wildcards in 
https://github.com/apache/sling/blob/trunk/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostOperation.java#L549)
 and that should be bound to the user without the according read rights.


was (Author: kwin):
Also I don't quite get why for the example from 
https://issues.apache.org/jira/browse/SLING-4415?focusedCommentId=14510911&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14510911
 the path is exposed, because always the resource resolver is being used (even 
to resolve the wildcards in 
https://github.com/apache/sling/blob/trunk/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostOperation.java#L549).

> Sling Post Processor: Do not create new exception in 
> AbstractPostResponse.setError
> ----------------------------------------------------------------------------------
>
>                 Key: SLING-6703
>                 URL: https://issues.apache.org/jira/browse/SLING-6703
>             Project: Sling
>          Issue Type: Improvement
>          Components: Servlets
>    Affects Versions: Servlets Post 2.3.14
>            Reporter: Konrad Windszus
>            Assignee: Konrad Windszus
>
> Currently {{AbstractPostResponse.setError}} 
> (https://github.com/apache/sling/blob/4df9ab2d6592422889c71fa13afd453a10a5a626/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostResponse.java#L221)
>  always ignores the given {{Throwable}} and just creates a new generic 
> {{SlingException}}.
> To e.g. allow {{SlingPostProcessor}} to throw meaningful exceptions which 
> occur in the response body, the given exception should not be wrapped but 
> just the given throwable's message text should be given out in the document.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to