[Solved] Bug (?) document visible from search while user...

[michaeled]

Hi,

In version 5.1.10, not reproduced in version 6.
When someone does a search, or in the dashboard (general), it is possible to list files that the user has no rights.
Clicking on any of these files, it's returned in the desktop. The file is then not visible but it is no longer possible to browse files.

[michaeled]

I am the only user that i have this issue ???

Will this bug be fixed ?

Thanx ,

Michael.

[jllort]

Default security manager evaluates in search engine only the node document ( if you have grants to see as itself will appearing in search results ), similar than linux, you have grants to see document but not to arrive document path. You will be able to seeing it but should not be able to open in desktop and downloading ( if one of both operation are allowed then there's some possible bug ).

Default security manager can be changed, but then search engine will decrease perfomance, for example if you evaluate all parent child nodes to get final accessing grant for each result will decrease in factor n ( depending the deep evaluation, number of child parents ).

[michaeled]

Exact ! (I forgot to remove the role UserRole from the document)

Thanx !

Michael.