[
https://jira.nuxeo.com/browse/NXP-7532?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Florent Guillaume updated NXP-7532:
-----------------------------------
Summary: Use same error message for "no document" and "no rights to
existing document" (was: The error message when the user had not the right to
read a document should be the same as when the document doesn't exist, if the
user has not the browse right to the parent)
> Use same error message for "no document" and "no rights to existing document"
> -----------------------------------------------------------------------------
>
> Key: NXP-7532
> URL: https://jira.nuxeo.com/browse/NXP-7532
> Project: Nuxeo Enterprise Platform
> Issue Type: Improvement
> Components: Web UI
> Affects Versions: 5.4.2
> Reporter: Julien Wajsberg
> Labels: security
>
> When a document doesn't exist, the error message is :
> "Document doesn't exist"
> When a document does exist but the user has not the read right (or browse
> right for a folder), the error message is :
> "You don't have the neccessary permission to do the requested action"
> I believe this error message is already too much information. I think it
> should be "Document doesn't exist", at least if the document has no parent
> (ie it's a domain) or the user hasn't the browse right on the parent.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
