Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-40618

Elfinder can't handle PermissionException when user can't visit one of their sites

    XMLWordPrintable

    Details

    • Test Plan:
      Hide

      Instructor and admin accounts are needed to test this:

      -Enter as instructor and create a course site with Resources tool.
      -Upload a document to Resources (not really needed).
      -Leave as draft (unpublish) the course site.
      -In MyWorkspace / Resources, create a new HTML file.
      -In CKEditor, click on add image and click on "Browse server" button. The course site and any other the user has are browsable in Elfinder.
      -Enter as admin and locate the realm of the course site.
      -Edit the realm and remove site.visit.unp in role Instructor.
      -As instructor, repeat the create html page and browse server again.
      -"The current user doesn't have access to: <SITE>" is shown in a modal dialog and, after closing it, Elfinder is empty and user can't select any resource of any site.

      Desired Outcome with Patch: the unreachable site is removed from Elfinder while the other sites remained available.

      Show
      Instructor and admin accounts are needed to test this: -Enter as instructor and create a course site with Resources tool. -Upload a document to Resources (not really needed). -Leave as draft (unpublish) the course site. -In MyWorkspace / Resources, create a new HTML file. -In CKEditor, click on add image and click on "Browse server" button. The course site and any other the user has are browsable in Elfinder. -Enter as admin and locate the realm of the course site. -Edit the realm and remove site.visit.unp in role Instructor. -As instructor, repeat the create html page and browse server again. -"The current user doesn't have access to: <SITE>" is shown in a modal dialog and, after closing it, Elfinder is empty and user can't select any resource of any site. Desired Outcome with Patch : the unreachable site is removed from Elfinder while the other sites remained available.

      Description

      We have found an issue in Elfinder that prevents users for browsing resources if they are members of a site that they can't visit (because site.visit or site.visit.unp are not available).

      When browsing resources, the list of volumes includes every user's site, no matter if they can visit it, but when the list of children is retrieved a PermissionException is thrown and Elfinder doesn't know how to manage it. The result is that users can't browse the server, no matter if they have other sites that they can visit.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                daniel.merino Daniel Merino Echeverría
                Reporter:
                daniel.merino Daniel Merino Echeverría
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Git Source Code