[ 
https://jira.nuxeo.com/browse/NXP-4073?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Benjamin Jalon resolved NXP-4073.
---------------------------------

       Resolution: Fixed
    Fix Version/s:     (was: 5.5)
                   5.3.1

Fixed since the history view is splitter into 2 tabs:
- one shows the lists of event on the document
- one other to see all versions of this document
So if the user have no version right, he can't see the second tabs and the joy 
to have this error..

> Fix authentication error when looking at history tab without rights
> -------------------------------------------------------------------
>
>                 Key: NXP-4073
>                 URL: https://jira.nuxeo.com/browse/NXP-4073
>             Project: Nuxeo Enterprise Platform
>          Issue Type: Bug
>          Components: Web UI
>    Affects Versions: 5.2 GA
>            Reporter: Anahide Tchertchian
>            Assignee: Thierry Delprat
>            Priority: Major
>             Fix For: 5.3.1
>
>
> Anonymous users can view the "history" tab of a published document. When 
> clicking on it, if they don't have access to workspaces, an error occurs 
> printing "You must be authenticated to perform this operation".
> stack trace is:
> Caused by: org.nuxeo.ecm.platform.audit.api.AuditException: An error occurred 
> while grabbing log entries for 097ec687-bb8f-4497-a7dc-05689370a2e0
>       at 
> org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:191)
>       at 
> org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:134)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>       at java.lang.reflect.Method.invoke(Method.java:585)
>       at org.jboss.seam.util.Reflections.invoke(Reflections.java:21)
>       at 
> org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:31)
>       at 
> org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56)
>       at 
> org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:31)
>       at 
> org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
>       at 
> org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:46)
>       at 
> org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
>       at 
> org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:42)
>       at 
> org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)
>       at 
> org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107)
>       at 
> org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:166)
>       at 
> org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:102)
>       at 
> org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean_$$_javassist_66.computeLogEntries(ContentHistoryActionsBean_$$_javassist_66.java)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>       at java.lang.reflect.Method.invoke(Method.java:585)
>       at org.jboss.seam.util.Reflections.invoke(Reflections.java:21)
>       at org.jboss.seam.util.Reflections.invokeAndWrap(Reflections.java:125)
>       ... 87 more
> Caused by: org.nuxeo.ecm.core.api.WrappedException: Exception: 
> org.nuxeo.ecm.core.api.RollbackClientException. message: 
> org.nuxeo.ecm.core.api.WrappedException: Exception: 
> org.nuxeo.ecm.core.api.DocumentSecurityException. message: Privilege 
> 'Version' is not granted to 'Guest'
>       at 
> org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getSourceDocument(DocumentManagerBean.java:517)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> ...
>       at 
> org.jboss.ejb3.security.Ejb3AuthenticationInterceptor.invoke(Ejb3AuthenticationInterceptor.java:110)
>       at 
> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
>       at 
> org.jboss.ejb3.ENCPropagationInterceptor.invoke(ENCPropagationInterceptor.java:46)
>       at 
> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
>       at 
> org.jboss.ejb3.asynchronous.AsynchronousInterceptor.invoke(AsynchronousInterceptor.java:106)
>       at 
> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
>       at 
> org.jboss.ejb3.stateful.StatefulContainer.localInvoke(StatefulContainer.java:206)
>       at 
> org.jboss.ejb3.stateful.StatefulLocalProxy.invoke(StatefulLocalProxy.java:119)
>       at $Proxy221.getSourceDocument(Unknown Source)
>       at 
> org.nuxeo.ecm.platform.audit.web.listener.ejb.ContentHistoryActionsBean.computeLogEntries(ContentHistoryActionsBean.java:178)
>       ... 111 more
> Caused by: org.nuxeo.ecm.core.api.WrappedException: Exception: 
> org.nuxeo.ecm.core.api.DocumentSecurityException. message: Privilege 
> 'Version' is not granted to 'Guest'
>       at 
> org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSession.java:293)
>       at 
> org.nuxeo.ecm.core.api.AbstractSession.getSourceDocument(AbstractSession.java:1791)
>       at 
> org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getSourceDocument(DocumentManagerBean.java:515)
>       ... 148 more

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets

Reply via email to