[ https://issues.apache.org/jira/browse/SLING-6703?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15938585#comment-15938585 ]
Konrad Windszus edited comment on SLING-6703 at 3/23/17 3:40 PM: ----------------------------------------------------------------- Also I don't quite get why for the example from https://issues.apache.org/jira/browse/SLING-4415?focusedCommentId=14510911&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14510911 the path is exposed, because always the request's resource resolver is being used (even to resolve the wildcards in https://github.com/apache/sling/blob/trunk/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostOperation.java#L549) and that should be bound to the user without the according read rights. was (Author: kwin): Also I don't quite get why for the example from https://issues.apache.org/jira/browse/SLING-4415?focusedCommentId=14510911&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14510911 the path is exposed, because always the resource resolver is being used (even to resolve the wildcards in https://github.com/apache/sling/blob/trunk/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostOperation.java#L549). > Sling Post Processor: Do not create new exception in > AbstractPostResponse.setError > ---------------------------------------------------------------------------------- > > Key: SLING-6703 > URL: https://issues.apache.org/jira/browse/SLING-6703 > Project: Sling > Issue Type: Improvement > Components: Servlets > Affects Versions: Servlets Post 2.3.14 > Reporter: Konrad Windszus > Assignee: Konrad Windszus > > Currently {{AbstractPostResponse.setError}} > (https://github.com/apache/sling/blob/4df9ab2d6592422889c71fa13afd453a10a5a626/bundles/servlets/post/src/main/java/org/apache/sling/servlets/post/AbstractPostResponse.java#L221) > always ignores the given {{Throwable}} and just creates a new generic > {{SlingException}}. > To e.g. allow {{SlingPostProcessor}} to throw meaningful exceptions which > occur in the response body, the given exception should not be wrapped but > just the given throwable's message text should be given out in the document. -- This message was sent by Atlassian JIRA (v6.3.15#6346)