Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #41867 check every sections are readable before POST
    Actions
    Infos
    #41867
    Nicolas Terray (nterray)
    2025-02-26 14:36
    2025-02-24 15:35
    43543
    Details
    check every sections are readable before POST

    Artidoc can be composed by different artifacts. Some can be unreadable to the current user (ex: perms on artifcat). In that case, in order to not present a document with only part of the information, it has been decided that the document content would not be displayed at all, even if user has right permissions on the document itself.

    Therefore we should check at the API level that all existing sections are readable before creating a new one.

    Artidoc
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Nicolas Terray (nterray)
    Closed
    2025-02-24
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #41091 Tuleap Releases 16.5 Delivered 2025-02-27 11:44 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #41867

    Git commit

    tuleap/tuleap/stable

    fix: request #41867: check every sections are readable before POST 9d61620544
    User avatar Nicolas Terray (nterray) , 2025-02-24 15:35
    Merge commit 'refs/changes/80/33580/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD fe4d79cf5d
    User avatar Thomas Gorka (tgorka) , 2025-02-24 16:46
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2025-02-26 14:36

    Disclosing, while this lacked consistency it did not really expose information nor permitted a user without write permissions to break the artidoc in ways they could not already do.