You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Konrad Windszus (JIRA)" <ji...@apache.org> on 2017/04/26 11:27:04 UTC

[jira] [Comment Edited] (SLING-6791) Servlet Resolver Test does no longer find scripts being referenced through resource type

    [ https://issues.apache.org/jira/browse/SLING-6791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15983008#comment-15983008 ] 

Konrad Windszus edited comment on SLING-6791 at 4/26/17 11:26 AM:
------------------------------------------------------------------

The user mapping for service resource resolver being used in https://github.com/apache/sling/blob/trunk/bundles/servlets/resolver/src/main/java/org/apache/sling/servlets/resolver/internal/SlingServletResolver.java#L1184 namely {{org.apache.sling.servlets.resolver:scripts}} is pointing towards the system user {{sling-scripting}}. This user only has read access below {{/apps}} and {{/libs}}. This is obviously not enough, since the user is also being used to figure out the resource type e.g. in {{/content}}. So either we change the mapping to point to sling-readall or we extend the ACLs being granted to {{sling-scripting}}. [~cziegeler] Can you have a look, since you implemented SLING-5237?


was (Author: kwin):
I don't find a user mapping for service resource resolver being used in https://github.com/apache/sling/blob/trunk/bundles/servlets/resolver/src/main/java/org/apache/sling/servlets/resolver/internal/SlingServletResolver.java#L1184. So most probably this is broken by SLING-5237. [~cziegeler] Can you have a look?

> Servlet Resolver Test does no longer find scripts being referenced through resource type
> ----------------------------------------------------------------------------------------
>
>                 Key: SLING-6791
>                 URL: https://issues.apache.org/jira/browse/SLING-6791
>             Project: Sling
>          Issue Type: Bug
>          Components: Servlets
>    Affects Versions: Servlets Resolver 2.4.10
>            Reporter: Konrad Windszus
>
> When using the latest launchpad (including Slingshot), going to /system/console/servletresolver?url=%2Fslingshot%2Fusers%2Fslingshot1.html&method=GET shows as candidates only
> {code}
> org.apache.sling.servlets.get.impl.DefaultGetServlet
> org.apache.sling.jcr.webdav.impl.servlets.SlingWebDavServlet
> {code}
> This is wrong, the script for rendering this is actually at {{/libs/slingshot/User/html.jsp}}.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)