Author: Halfvares Mats, Teknikhuset AB.

Published: 2004-11-04

Applies to:
  • Content Studio ver. 4.0

Type: Bug


Symptoms

When doing a full text search the result page might display document that the caller has no browse right to. When the clicked on the document an error message or page occurred.

Cause

In Content Studio it is possible to set permissions on document level and the retail version of the full text search engine does not check this permission before returning the documents. In the rare occasions where the site administrators set direct permissions on a document this can cause unwanted effects. However this does not make it possible for the user to read the document's content. Unfortunately when extended search result is implemented or when the document's introduction it is possible to read parts of the document even though the caller does not have the correct permission.

Resolution

This problem has been fixed in version 4.0 build 1007.