[jira] [Resolved] (SLING-10169) Enabling servlet.post.autoCheckout breaks POST requests when one of the ancestor nodes is not accessible

["Robert Munteanu (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SLING-10169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Munteanu resolved SLING-10169.
-------------------------------------
    Fix Version/s: Servlets POST 2.4.4
       Resolution: Fixed

> Enabling servlet.post.autoCheckout breaks POST requests when one of the ancestor nodes is not accessible
> --------------------------------------------------------------------------------------------------------
>
>                 Key: SLING-10169
>                 URL: https://issues.apache.org/jira/browse/SLING-10169
>             Project: Sling
>          Issue Type: Bug
>          Components: Servlets
>    Affects Versions: Servlets Post 2.3.36
>            Reporter: Sergiu Dumitriu
>            Assignee: Robert Munteanu
>            Priority: Major
>             Fix For: Servlets POST 2.4.4
>
>          Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> Example:
> - enable servlet.post.autoCheckout
> - create a non-admin user
> - deny access to / (the root node)
> - allow access to /content
> - try to post new content
> - request fails with 500 Server Error because findVersionableAncestor fails to handle the AccessDeniedException thrown when trying to access the parent of /content



--
This message was sent by Atlassian Jira
(v8.3.4#803005)