[GeoNetwork-devel] 2.10.1 - Operation not allowed when viewing bookmarked metadata

I just installed 2.10.1 and noticed and issues when linking to metadata
record with insufficient privs. In the previous version if I bookmarked a
metadata record when logged in as the admin user - with url similar to the
following.

http://localhost:8080/geonetwork/srv/eng/metadata.show?id=1&currTab=simple

Linking to the page prior to login in would have asked for credentials prior
to viewing the content. Now it generate the following error.

This may be related to the following commit.

https://github.com/geonetwork/core-geonetwork/commit/e73dd5ff89c937c1446678f02273c15ae6944a3d

Here is the generated error from the logs.

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/2-10-1-Operation-not-allowed-when-viewing-bookmarked-metadata-tp5068745.html
Sent from the GeoNetwork developer mailing list archive at Nabble.com.

2013/7/25 ianwallen <ianwallen@anonymised.com>:

I just installed 2.10.1 and noticed and issues when linking to metadata
record with insufficient privs. In the previous version if I bookmarked a
metadata record when logged in as the admin user - with url similar to the
following.

http://localhost:8080/geonetwork/srv/eng/metadata.show?id=1&currTab=simple

Linking to the page prior to login in would have asked for credentials prior
to viewing the content. Now it generate the following error.

This may be related to the following commit.

https://github.com/geonetwork/core-geonetwork/commit/e73dd5ff89c937c1446678f02273c15ae6944a3d

Yes it is. The behavior is now same as in 2.8 and before. The main
issue is that the AuthenticationException clean the user credentials
and will log user off.

I'm not sure where and when the redirection occur so we should
probably improve that.
Some apps like widgets would like to get the exception and take care
of the redirect to login, legacy UI would like the automatic redirect.

Francois

Here is the generated error from the logs.

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/2-10-1-Operation-not-allowed-when-viewing-bookmarked-metadata-tp5068745.html
Sent from the GeoNetwork developer mailing list archive at Nabble.com.

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
GeoNetwork-devel mailing list
GeoNetwork-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork