[
https://issues.apache.org/jira/browse/SLING-6791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15983008#comment-15983008
]
Konrad Windszus edited comment on SLING-6791 at 4/26/17 11:27 AM:
------------------------------------------------------------------
The user mapping for service resource resolver being used in
https://github.com/apache/sling/blob/trunk/bundles/servlets/resolver/src/main/java/org/apache/sling/servlets/resolver/internal/SlingServletResolver.java#L1184
namely {{org.apache.sling.servlets.resolver:scripts}} is pointing towards the
system user {{sling-scripting}}. This user only has read access below {{/apps}}
and {{/libs}}. This is obviously not enough, since the user is also being used
to figure out the resource type e.g. in {{/content}} (so this line here does
not resolve the correct resource:
https://github.com/apache/sling/blob/trunk/bundles/servlets/resolver/src/main/java/org/apache/sling/servlets/resolver/internal/SlingServletResolver.java#L1264).
So either we change the mapping to point to sling-readall or we extend the
ACLs being granted to {{sling-scripting}}. [~cziegeler] Can you have a look,
since you implemented SLING-5237?
was (Author: kwin):
The user mapping for service resource resolver being used in
https://github.com/apache/sling/blob/trunk/bundles/servlets/resolver/src/main/java/org/apache/sling/servlets/resolver/internal/SlingServletResolver.java#L1184
namely {{org.apache.sling.servlets.resolver:scripts}} is pointing towards the
system user {{sling-scripting}}. This user only has read access below {{/apps}}
and {{/libs}}. This is obviously not enough, since the user is also being used
to figure out the resource type e.g. in {{/content}}. So either we change the
mapping to point to sling-readall or we extend the ACLs being granted to
{{sling-scripting}}. [~cziegeler] Can you have a look, since you implemented
SLING-5237?
> Servlet Resolver Test does no longer find scripts being referenced through
> resource type
> ----------------------------------------------------------------------------------------
>
> Key: SLING-6791
> URL: https://issues.apache.org/jira/browse/SLING-6791
> Project: Sling
> Issue Type: Bug
> Components: Servlets
> Affects Versions: Servlets Resolver 2.4.10
> Reporter: Konrad Windszus
>
> When using the latest launchpad (including Slingshot), going to
> /system/console/servletresolver?url=%2Fslingshot%2Fusers%2Fslingshot1.html&method=GET
> shows as candidates only
> {code}
> org.apache.sling.servlets.get.impl.DefaultGetServlet
> org.apache.sling.jcr.webdav.impl.servlets.SlingWebDavServlet
> {code}
> This is wrong, the script for rendering this is actually at
> {{/libs/slingshot/User/html.jsp}}.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
