•  
      request #7452 Elasticsearch returns facets without taking permission into account
    Infos
    #7452
    Manuel Vacelet (vaceletm)
    2019-03-18 17:19
    2014-09-17 16:50
    6888
    Details
    Elasticsearch returns facets without taking permission into account

    Setup:

    • 1 public project with a wiki page named "new-page"
    • 1 private project with a wiki page named "new-page"
    • User is neither member of public of private project

    When I search of "*page", I'll get only one result, in public project but 2 facets (private and public project).

    Identified during Valid 7.5 (test_exec #12970)

    Empty
    Full text search
    7.4
    Empty
    Empty
    Stage
    Empty
    Declined
    2019-03-18
    Attachments
    Empty
    References

    List of items referenced by or referencing this item.

    Artifact Tracker v5

    Follow-ups

    • User avatar
      FTS plugin has been removed, see request #13110.

      • Status changed from Verified to Declined
      • Close date set to 2019-03-18
    • User avatar
      • Original Submission