Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-42477

Resources: not honoring changes in group access

    Details

    • Test Plan:
      Hide

      In a site with a few students:

      1. Create a couple of groups
      2. Add a couple of items to resources, setting item1 for group1 and item2 for group2
      3. Log in as a student from each group and verify you can only see the item for your group
      4. As the instructor, edit each item:
        • Item1: set to allow site members to access
        • Item2: set to group1
      5. Log in as a student from each group and verify you are able to only view what you were given access for 
      Show
      In a site with a few students: Create a couple of groups Add a couple of items to resources, setting item1 for group1 and item2 for group2 Log in as a student from each group and verify you can only see the item for your group As the instructor, edit each item: Item1: set to allow site members to access Item2: set to group1 Log in as a student from each group and verify you are able to only view what you were given access for 

      Description

      Testing SAK-40282, I created 2 groups, added 2 resources: 

      • Color-pencils-icon.png - group1
      • bmw-mini-icon.png - group2

      As users in each group, I verified they were only able to view the image for their group.

      I then modified permissions, setting Color-pencils-icon.png to site members and bmw-mini-icon.png to group1.

      As a user from group2, I'm still able to view bmw-mini-icon.png, but received an error when trying to view  Color-pencils-icon.png (The server understood the request, but refuses to authorize it.) The group2 user should not have been allowed to see bmw-mini-icon.png, but should have been able to view Color-pencils-icon.png.

       

      I refreshed the server logs several times, but don't see any errors other than the missing key error (SAK-42314). Site ID: 76652250-bd2e-412f-8a6e-b8e47b5bbf93

      ------------------------------

      10-Sep-2019 20:15:22.185 WARN [http-nio-20013-exec-15] org.sakaiproject.portal.charon.handlers.SiteHandler.doSite Post buffer bypass CTI=sakai.resources URL=https://trunk-mysql.nightly.sakaiproject.org/portal/site/76652250-bd2e-412f-8a6e-b8e47b5bbf93/tool/f8ac02f0-add8-44d8-806f-d8f812ec5c28/sakai.resource.type.helper.helper?sakai_action=doPost&flow=save
      10-Sep-2019 20:15:22.715 WARN [http-nio-20013-exec-16] org.sakaiproject.util.ResourceLoader.getString bundle 'types' missing key: 'list.site.dropbox' from: sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source)
      10-Sep-2019 20:16:34.369 WARN [http-nio-20013-exec-15] org.sakaiproject.util.ResourceLoader.getString bundle 'types' missing key: 'list.site.dropbox' from: sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source)
      10-Sep-2019 20:16:54.514 WARN [http-nio-20013-exec-16] org.sakaiproject.portal.charon.handlers.SiteHandler.doSite Post buffer bypass CTI=sakai.resources URL=https://trunk-mysql.nightly.sakaiproject.org/portal/site/76652250-bd2e-412f-8a6e-b8e47b5bbf93/tool/f8ac02f0-add8-44d8-806f-d8f812ec5c28/sakai.resource.type.helper.helper?sakai_action=doPost&flow=save
      10-Sep-2019 20:16:55.097 WARN [http-nio-20013-exec-20] org.sakaiproject.util.ResourceLoader.getString bundle 'types' missing key: 'list.site.dropbox' from: sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source)
      10-Sep-2019 20:17:07.376 WARN [http-nio-20013-exec-20] org.sakaiproject.util.ResourceLoader.getString bundle 'types' missing key: 'list.site.dropbox' from: sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source)
      10-Sep-2019 20:17:20.679 WARN [http-nio-20013-exec-6] org.sakaiproject.util.ResourceLoader.getString bundle 'types' missing key: 'list.site.dropbox' from: sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source)

       

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  agschmidt Andrea Schmidt
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:

                    Git Source Code