Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-16203

Public portfolios that link to (AnyURI) fields in forms do not get displayed

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.5.0, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.6.0
    • Fix Version/s: 2.7.2, 2.8.0
    • Component/s: OSP: Portfolios
    • Labels:
      None
    • Environment:
      MySQL 5, tomcat 5.5.27, OS X

      Description

      If a portfolio template displays content from a form that contains an "attachment field" (anyURI type), the link to that resource item does not pass through the security advisor and is unavailable to portfolio viewers that do not have permission to view that item. This occurs frequently when portfolios are made public, as no one is required to login to view the portfolio.

        Gliffy Diagrams

          Zeplin

            Attachments

              Issue Links

                Activity

                  People

                  • Assignee:
                    osp-jira OSP Jira Team (Inactive)
                    Reporter:
                    smkeesle Sean Keesler (Inactive)
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    3 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved:

                      Git Integration