Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-12691

group privileges insufficient to search for member content

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.2.1
    • Fix Version/s: 3.14.0
    • Component/s: Search, Security, UX
    • Labels:
    • Story Points:
      5
    • Epic Link:
    • Sprint:
      Core Team - Sprint 96

      Description

      Logging in as a registered user which has BROWSE and READ privileges to the GROUP containing several private repos (and also nx-search-read).

      The user DOES NOT have BROWSE or READ privileges to the individual group repository member repos in the GROUP, only the GROUP repository (which works fine as maven2 repos).

      Doing a search through the GUI does not yield any result at all, which is not what I expected.

      The user can browse to the component and download, but is unable to search this component

      Acceptance criteria:

      • If the user has BROWSE permissions to the group, they should be able to search for components in the member repositories of that group (even if they don't have explicit permissions for those repositories). They should also be able to view the component/asset details, though not download the assets (that requires the READ permission).
      • Make sure that component-level permissions are still applied.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dsawa Dawid Sawa
              Reporter:
              msurani Mahendra Surani
              CC:
              Kent Granstrom
              Last Updated By:
              Peter Lynch
              Team:
              Nexus - UX
              Votes:
              2 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title