Details
-
Bug
-
Resolution: Fixed
-
Major
-
3.1.0, 3.1.1, 3.1.1.1
-
Security Level: Public
-
None
-
CBG Sprint 138
-
1
Description
Repro steps:
- Create role with collection access to channel A
- Create user with the role just created assigned to it
- Put some docs in database with channel A assigned
- Run changes feed as the user created with filter for channel A, the changes feed is empty and we get that logging to say the user doesn't have access to channel A (although we do through the role assigned to the user)
FilterToAvailableCollectionChannels doesn't check against inherited collection access from roles the user has been assigned. Regression in 3.1+, test passes fine in 3.0.9
Attachments
Issue Links
- Clones
-
CBG-3559 Inherited channels from roles are not checked when running changes feed filtered to a channel
- Closed