Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-20164

Permissions issue with imported Portfolio Template: Stack trace when anyone other than importer tries to detach XSL

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 2.7.1, 2.9.0
    • Fix Version/s: None
    • Labels:
      None

      Description

      There seems to have been a change in the way permissions are handled for Portfolio Templates in 2.7 (at least it seems to me we should have seen this before if it were a longstanding problem.) When a user imports a Portfolio Template, the support files are stored in that user's My Workspace > Resources > Imported Presentations' Files. Although this folder is private, the XSL file does seem to be available to users who are displaying portfolios without any problem. However, when another user in the site, someone who has the Owner or Organizer role and should be able to edit the Portfolio Template, tries to detach the XSL, they trigger a stack trace due to the permissions issue. The stack trace is not very informative, but I have attached it.

      To trigger the problem:

      1. As the first user, import any valid Portfolio Template.
      2. Publish the Template.
      3. Log out
      4. Log in as the second user, who has the Owner or Organizer role
      5. Edit the Portfolio Template, continuing to Page 2 of 4, "Build Template"
      6. Click "Select File"

      Result: the attached stack trace

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                osp-jira OSP Jira Team (Inactive)
                Reporter:
                ericaack Erica Ackerman (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Git Source Code