Azure / Azure/api-management-developer-portal

Protected page with USer group shows page doesnt exists error

Open
#2,649 1 comment 0 reactions 0 assignees View on GitHub
Response needed
Dominant language
TypeScript
Stars
545
Forks
360
PR merge metrics
No merged PRs in 30d

Description

## Bug description

We have Dev portal hosted on top of Internal API management instance, we wanted to protect all the pages from anonymous access. So, in page settings for all the pages, under testing its kept to be accessible by developer's user group.

Now when I load the home page it says, "Page you are looking for doesn't exists".

image

## Reproduction steps

1. Go to pages in admin
2. click on settings and make home page accessible only to certain group
3. Publish the portal
4. Try to navigate to home page in normal mode

## Expected behavior

Page should be throwing User not authorized to view this page

## Is self-hosted portal?
Yes

> [!WARNING]
> "Managed developer portal issues" will be closed automatically. See above for more details.

## Release tag or commit SHA (if using self-hosted version)

[e.g., release `2.0.0`, commit `c45da9778b70d369aba60fa2e63c191efe2b548f`]

## API Management service name

[azusam1lwv787](https://portal.azure.com/#@sodexo.onmicrosoft.com/resource/subscriptions/6e3fc63f-851b-4fc7-8499-48f6a9c28a65/resourceGroups/ist-glb-use2-sas-uat-rg01/providers/Microsoft.ApiManagement/service/azusam1lwv787)

## Environment

UAT

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the self-hosted portal flow by restricting the home page to the developers' user group, publishing it, and opening it anonymously. Compare the resulting “page doesn't exist” response with the expected unauthorized message, then locate the page-access and error-handling entry points. Done means unauthorized users receive the intended authorization error while permitted users can still open the page.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, typescript
Domain
authorization, frontend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.