Don't autosuggest items when the user does not have permission

Description

Background

Workflow permissions are not applied in the autosuggest. This means a user can find articles which should be hidden for him.

Function requirements

  • Apply the permissions

Technical information

In the ContentController this code is used to apply the permissions:

Technical tasks

None

Deployment actions

None

Activity

Show:
Jeroen van Leeuwen
January 6, 2017, 9:24 AM

hier de issue van de solarium client

Marijn Otte
January 10, 2017, 8:46 AM
Edited

content suggestions --> works OK
shingles suggestions --> permissions are not applied

When I have an article called "hondepoep" and log in with a user without permissions to this article the text appears in the shingles suggestions:

The specs say "can find articles" so I'm not sure you included the shingles suggestions in the scope. If it is not easy to fix (or not possible) please let met know and it will be a new issue.

Jeroen van Leeuwen
January 10, 2017, 8:55 AM

I will discuss this with .

Thanks for the feedback!

Jeroen van Leeuwen
January 10, 2017, 11:54 AM

we can not find any explanation why the code does not work at this moment. We can try to fix this in this issue but for now we can not say if it is an easy fix.

Marijn Otte
January 10, 2017, 12:06 PM

I created a new issue for for the shingles suggestions, so we can close this issue

Assignee

Unassigned

Client

Integrated Marijn

Sprint

None

Fix versions

Configure