•  
      request #7452 Elasticsearch returns facets without taking permission into account
    Infos
    #7452
    Manuel Vacelet (vaceletm)
    2019-03-18 17:19
    2014-09-17 16:50
    7451
    Details
    Elasticsearch returns facets without taking permission into account

    Setup:

    • 1 public project with a wiki page named "new-page"
    • 1 private project with a wiki page named "new-page"
    • User is neither member of public of private project

    When I search of "*page", I'll get only one result, in public project but 2 facets (private and public project).

    Identified during Valid 7.5 (test_exec #12970)

    Full text search
    7.4
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Declined
    2019-03-18
    Attachments
    Empty
    References
    Referenced by request #7452

    Follow-ups

    User avatar
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes