Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-22892

Search API Forbidden for group repository

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Medium
    • Resolution: Unresolved
    • Affects Version/s: 3.21.1, 3.26.1
    • Fix Version/s: None
    • Component/s: REST, Search
    • Labels:

      Description

      We are getting a 403 Forbidden error when using REST API Search in a group repository.

      We have a public group "public-acme-openshift-snap-grp" that has "read" and "browse" privilege on a private repository "acme-openshift-snapshots". When using GUI, we can access resources in the private repository through the public group. However, when using Search REST API (e.g. /service/rest/v1/search/assets/download) we can not.

      We suppose the problem is that when searching for the artifact Nexus does not return correct "downloadUrl", i.e. instead of having repository value set as "public-acme-openshift-snap-grp" it returns "acme-openshift-snapshots" which is private hence the error.

      Is this the expected behavior? Can we get downloadUrl populated with "repository" value from the search if a resource is found?

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            stanislav.bebej Stanislav Bebej
            Last Updated By:
            Joe Tom
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Date of First Response:

                tigCommentSecurity.panel-title