Workflow permissions are not applied in the autosuggest. This means a user can find articles which should be hidden for him.
Apply the permissions
In the ContentController this code is used to apply the permissions:
hier de issue van de solarium client
content suggestions --> works OK
shingles suggestions --> permissions are not applied
When I have an article called "hondepoep" and log in with a user without permissions to this article the text appears in the shingles suggestions:
The specs say "can find articles" so I'm not sure you included the shingles suggestions in the scope. If it is not easy to fix (or not possible) please let met know and it will be a new issue.
I will discuss this with .
Thanks for the feedback!
we can not find any explanation why the code does not work at this moment. We can try to fix this in this issue but for now we can not say if it is an easy fix.
I created a new issue for for the shingles suggestions, so we can close this issue