[
http://jira.nuxeo.org/browse/NXP-1863?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=36164#action_36164
]
Radu Darlea commented on NXP-1863:
----------------------------------
For a Custom project I needed to create a new role, basically to rename the
"Everything". I used something like:
<permission name="ProjectManager">
<include>Everything</include>
</permission>
but it doesn't work. When the user having this role tries to do something, the
check of permissions fails because the "ProjectManager" isn't found as
acceptable. The problem was solved once I replaced with:
<permission name="ProjectManager">
<include>ReadWrite</include>
<include>WriteSecurity</include>
</permission>
I suppose the Everything right can't be used as definition for "All rights"
when included in a newly created role.
> getPermissionGroups method in PermissionProvider doesn't return
> SecurityConstants.Everything right
> --------------------------------------------------------------------------------------------------
>
> Key: NXP-1863
> URL: http://jira.nuxeo.org/browse/NXP-1863
> Project: Nuxeo Enterprise Platform
> Issue Type: Bug
> Components: Security
> Affects Versions: 5.1.3
> Environment: Latest build on branch
> Reporter: Radu Darlea
> Assignee: Thomas Roger
> Fix For: 5.1.5, 5.2 M2
>
>
> The method PermissionProvider.getPermissionGroups() doesn't returns
> SecurityConstants.EVERYTHING in list when required WRITE right, although it
> is supposed that Everything includes Write right. Although I can easily add
> the Everything right in the returned list, I suppose there is a hidden
> problem in the code so I would like a deeper investigation.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
