Details
-
Bug
-
Resolution: Fixed
-
High
-
2.5.8
Description
Description
Users can see the full view if they have to embed only permissions
Current
User see full view even if they don't have permission
Expected
User redirect to Login page
And
Description
When the user doesn't have permissions (for instance content/read) then eZ\Publish\Core\Base\Exceptions\UnauthorizedException is thrown.
Current
A user is not redirected. An application shows
The server returned a "500 Internal Server Error".
In the logs are entries regarding that:
request.CRITICAL: Uncaught PHP Exception Twig_Error_Runtime: "An exception has been thrown during the rendering of a template ("User does not have access to 'read' 'content'")." at vendor/ezsystems/ezpublish-kernel/eZ/Bundle/EzPublishCoreBundle/Resources/views/pagelayout.html.twig line 11
Unknown macro: {"exception"}
Expected
User redirect to Login page
Attachments
Issue Links
- testing discovered
-
EZP-31358 The user does not have access to embedded content with correct permissions
- Closed