After an upgrade from 5.4 to 5.6-SNAPSHOT (commit 50a4f046d4b9f497b688547f9bf4a8624fcff65e), I'm getting this message in two contexts:
ERROR org.dspace.discovery.BitstreamContentStream @
Authorization denied for action READ on BITSTREAM:8742 by user 0
1) During initial reindex after the upgrade, I got many of these messages in dspace.log.
2) When accessing a restricted bitstream (restricted to a group) as Anonymous in XMLUI, instead of being redirected to the login page, I get the XMLUI error page with the following stack trace:
org.dspace.authorize.AuthorizeException: Authorization denied for action READ on BITSTREAM:9134 by user 0
at sun.reflect.GeneratedMethodAccessor91.invoke(Unknown Source)
For the same item in JSPUI, I do get the login page.