[MRM-1908] Logged on users can write any repository

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.3
• Component/s: Users/Security
• Assignee: Olivier Lamy
• Reporter: Krisztian Fekete
• Created: 04/Dec/15 12:34
• Updated: 05/May/17 11:01
• Resolved: 13/Sep/16 00:53

Description

Our sandbox Archiva 2.2.0 instance is connected with our corporate LDAP service. I created a repository with name common-internal. My LDAP user feketk1 doesn't have any permission on the common-internal repository. When I login through the web UI with my feketk1 user, I am able to upload artefacts to the common-internal repository.

For additional details please check attached screenshots.

Issue Links

• links to: GitHub Pull Request #9
• links to: GitHub Pull Request #26