Page 1 of 1

[Solved] Bug (?) document visible from search while user...

PostPosted:Thu Aug 09, 2012 1:30 pm
by michaeled
Hi,

In version 5.1.10, not reproduced in version 6.
When someone does a search, or in the dashboard (general), it is possible to list files that the user has no rights.
Clicking on any of these files, it's returned in the desktop. The file is then not visible but it is no longer possible to browse files.

Re: Bug (?) document visible from search while user has no r

PostPosted:Fri Aug 10, 2012 2:16 pm
by michaeled
I am the only user that i have this issue ???

Will this bug be fixed ?

Thanx ,

Michael.

Re: Bug (?) document visible from search while user has no r

PostPosted:Sun Aug 12, 2012 10:23 am
by jllort
Default security manager evaluates in search engine only the node document ( if you have grants to see as itself will appearing in search results ), similar than linux, you have grants to see document but not to arrive document path. You will be able to seeing it but should not be able to open in desktop and downloading ( if one of both operation are allowed then there's some possible bug ).

Default security manager can be changed, but then search engine will decrease perfomance, for example if you evaluate all parent child nodes to get final accessing grant for each result will decrease in factor n ( depending the deep evaluation, number of child parents ).

Re: Bug (?) document visible from search while user has no r

PostPosted:Sun Aug 12, 2012 11:20 am
by michaeled
Exact ! (I forgot to remove the role UserRole from the document)

Thanx !

Michael.