500 error using folder browse widget if the user does not have access to the folder's parent

UI Widget: 500 error using folder browse widget if the user does not have access to the folder's parent. Am I missing something? Shouldn't the widget authenticate only at that folder level?

Find more posts tagged with

Comments

Ferdinand Prantl

It would mean, that there are two problems there:

Missing permissions should be reported with the status code 401 and 403 by the REST API. 500 means an internal server error like a crash of the processing thread.
Smart UI is not supposed to access the parent node explicitly to get this error.

I cannot reproduce it using the upcoming CS version (16.2.4). I tried to access a folder at "<CS CGI URL>/app/nodes/<Node ID>". I removed the "see contents" permission for me from its parent. You're supposed to see the breadcrumbs cut, but no error messages.

What CS version do you have?

Jamie_McLeod

Currently on version 10.5. When I add the permissions to the parent object, there is no error. As for the breadcrumb, I set the stop id to be the same as the folder id.