We are getting a 403 Forbidden error when using REST API Search in a group repository.
We have a public group "public-acme-openshift-snap-grp" that has "read" and "browse" privilege on a private repository "acme-openshift-snapshots". When using GUI, we can access resources in the private repository through the public group. However, when using Search REST API (e.g. /service/rest/v1/search/assets/download) we can not.
We suppose the problem is that when searching for the artifact Nexus does not return correct "downloadUrl", i.e. instead of having repository value set as "public-acme-openshift-snap-grp" it returns "acme-openshift-snapshots" which is private hence the error.
Is this the expected behavior? Can we get downloadUrl populated with "repository" value from the search if a resource is found?