Revisions access caching doesn't include global permissions context

Created on 9 July 2024, 2 months ago

Problem/Motivation

.. or something ;)

Steps to reproduce

1. Create a group with user X as owner and admin member, set outsider user with some global role to have permission to access group revisions for this type, create user Y without roles, access group revisions (group/A/revisions), observe access denied (expected).
2. Add global role to user Y that should make him/her the group outsider admin with access to revisions, visit group/A/revisions on user Y, observe access denied (not expected)
3. Clear caches, visit group/A/revisions on user Y, now the page should be accessible.

Proposed resolution

Add user permissions context somewhere.

🐛 Bug report
Status

Active

Version

3.3

Component

Code

Created by

🇵🇱Poland Graber

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024