Uploaded image for project: 'Jackrabbit Content Repository'
  1. Jackrabbit Content Repository
  2. JCR-3492

versionHistory.addVersionLabel() fails with AccessDeniedException even when user has proper permission

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.5.2
    • Fix Version/s: None
    • Labels:
      None

      Description

      If a user does not have access to version store node and following operation fails with access denied
      versionHistory.addVersionLabel(version.getName(), label, true);
      16.01.2013 12:23:44.740 WARN [0:0:0:0:0:0:0:1 [1358319224592] GET /libs/dam/gui/content/assets/versioning/createversion.html HTTP/1.1] com.adobe.granite.asset.core.impl.AssetVersionManagerImpl Failed to add version label javax.jcr.AccessDeniedException: Access denied.
      at org.apache.jackrabbit.core.security.DefaultAccessManager.checkPermission(DefaultAccessManager.java:193)
      at org.apache.jackrabbit.core.version.VersionHistoryImpl.checkVersionManagementPermission(VersionHistoryImpl.java:311)
      at org.apache.jackrabbit.core.version.VersionHistoryImpl.addVersionLabel(VersionHistoryImpl.java:172)

      whereas the user have proper acl on the node that is being versioned. checkin and checkout operations are successful, it is just the addVersionlabel that fails.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                amitxlnc Amit Gupta
              • Votes:
                1 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated: