Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-21870

selector privelege works in webinterface and results in code 403 in nuget clients

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: New
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.19.1
    • Fix Version/s: None
    • Component/s: Content Selectors, NuGet
    • Labels:
      None

      Description

      Steps to reproduce issue:

      1. create a CSEL-selector `selector-foo` for some content
      2. create a privilege `prev-foo` for `selector-foo` of type 'Repository Content Selector' with Actions "browse,read" using a nuget repository
      3. create a role `role-foo` and give preveleges `prev-foo` and `nx-search-read`
      4. create a user `user-foo` and grant role `role-foo`

      Expected behavior

      User `user-foo` should be able to download nugets by using the webinterface or by using nuget clients.

      Observed behaviour

      User `user-foo` is able to download nugets by using the webinterface.

      User `user-foo` is not able to download nugets by using nuget clients.

      Tested nuget clients:

      • Visual Studio
      • nuget.exe

      Nuget clients are getting the error code 403.

      What I did to find more information

      I gave the preveleges 'nx-repository-view-nuget-read' and 'nx-repository-view-nuget-browse' to the `role-foo` and then user `user-foo` was able to download nugets by using Visual Studio.

        Attachments

          Activity

            People

            Assignee:
            mpiggott Matthew Piggott
            Reporter:
            vfm Viktor Fast
            Last Updated By:
            Joe Tom Joe Tom
            Votes:
            1 Vote for this issue
            Watchers:
            7 Start watching this issue

              Dates

              Created:
              Updated:
              Date of First Response:

                tigCommentSecurity.panel-title