[
https://issues.apache.org/jira/browse/MRM-1908?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15208207#comment-15208207
]
Oliver E commented on MRM-1908:
-------------------------------
For us this issue happens when a user has only a single manager role (e.g.
"test-repo Manager").
Then the user can choose whatever repository he wants to upload any file.
If the user has no manager role whatsoever, the navigation point "Upload
Artifact" is not shown.
For me this seems like a problem while building the repository-list in the
upload form.
Expected behaviour: Only "test-repo" is shown
Actual behaviour: all repositories are shown
> Logged on users can write any repository
> ----------------------------------------
>
> Key: MRM-1908
> URL: https://issues.apache.org/jira/browse/MRM-1908
> Project: Archiva
> Issue Type: Bug
> Components: Users/Security
> Affects Versions: 2.2.0
> Reporter: Krisztian Fekete
> Attachments: archiva1.jpg, archiva2.jpg, archiva3.jpg, archiva4.jpg,
> archiva5.jpg, archiva6.jpg
>
>
> Our sandbox Archiva 2.2.0 instance is connected with our corporate LDAP
> service. I created a repository with name common-internal. My LDAP user
> feketk1 doesn't have any permission on the common-internal repository. When I
> login through the web UI with my feketk1 user, I am able to upload artefacts
> to the common-internal repository.
> For additional details please check attached screenshots.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
