Skip to content
This repository has been archived by the owner on Jul 25, 2018. It is now read-only.

Handling of get sub projects without having access to it #797

Open
maierthomas opened this issue Mar 26, 2018 · 0 comments
Open

Handling of get sub projects without having access to it #797

maierthomas opened this issue Mar 26, 2018 · 0 comments

Comments

@maierthomas
Copy link
Contributor

maierthomas commented Mar 26, 2018

In sw360 portal users can link projects to the selected project as kind of a sub project.
The user can see this relation in the following menus:

  • linked releases and projects (Projects)
  • is used by the following projects (Components)

For each project users can set individual project visibilities (group, moderators, everyone, private).
Therefore it can be possible that some projects are linked to projects with visibility group or private..
This will result that projects are linked, but the user does not have access to them.

In the current implementation sw360portal (ProjectDatabaseHandler, getProjectById) throws a generic sw360exception in case of getting information about the linked project.

  • add additional exception, e.g. 403 forbidden
  • usages of this method should be modified, individually decision of exception handling
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant