Error when trying to add or edit content with a limited role without the "Search" tool
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 970
- Forks
- 486
- Avg merge
- 3d 33m
- Merged PRs (30d)
- 170
Description
Problem Statement
When trying to add or edit content with a limited role without the "Search" tool, an error is thrown in the UI, even though the expected permissions were already granted in order to be able to do so.
Steps to Reproduce
https://github.com/user-attachments/assets/47519b8c-9fbc-4d37-b72a-0cbdf4b40a5a
- Create a new role with the permissions and tools on the screen recording
- Create a new user with the role created on 1.
- Sign in as the new user and attempt to edit a piece of content inside a page, or add a new content to the page
An error will be displayed in the UI preventing to perform the operation.
Acceptance Criteria
A role with enough permissions should not require the "Search" tool to be able to perform the actions granted by the permissions.
dotCMS Version
trunk / 26.02.17-01_2263c4e
Severity
Medium - Some functionality impacted
Links
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the limited-role scenario from the listed steps, using the linked recording and the permissions shown there. Trace the role and tool permission checks involved in adding or editing page content; done means the permitted actions work without granting the Search tool and the error no longer appears in the UI.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, content
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100