dotCMS / dotCMS/core

Error when trying to add or edit content with a limited role without the "Search" tool

Open
#34,787 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

OKR : Customer Support stale Team : Maintenance
Dominant language
Java
Stars
970
Forks
486
Avg merge
3d 33m
Merged PRs (30d)
170

Description

Problem Statement

When trying to add or edit content with a limited role without the "Search" tool, an error is thrown in the UI, even though the expected permissions were already granted in order to be able to do so.

Steps to Reproduce

https://github.com/user-attachments/assets/47519b8c-9fbc-4d37-b72a-0cbdf4b40a5a

  1. Create a new role with the permissions and tools on the screen recording
  2. Create a new user with the role created on 1.
  3. Sign in as the new user and attempt to edit a piece of content inside a page, or add a new content to the page

An error will be displayed in the UI preventing to perform the operation.

Acceptance Criteria

A role with enough permissions should not require the "Search" tool to be able to perform the actions granted by the permissions.

dotCMS Version

trunk / 26.02.17-01_2263c4e

Severity

Medium - Some functionality impacted

Links

https://helpdesk.dotcms.com/a/tickets/35541

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the limited-role scenario from the listed steps, using the linked recording and the permissions shown there. Trace the role and tool permission checks involved in adding or editing page content; done means the permitted actions work without granting the Search tool and the error no longer appears in the UI.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, content
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.