Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-3347

Authorization denied for Anonymous access to restricted bistream

    Details

    • Attachments:
      0
    • Comments:
      11
    • Documentation Status:
      Not Required

      Description

      After an upgrade from 5.4 to 5.6-SNAPSHOT (commit 50a4f046d4b9f497b688547f9bf4a8624fcff65e), I'm getting this message in two contexts:

      ERROR org.dspace.discovery.BitstreamContentStream @
      Authorization denied for action READ on BITSTREAM:8742 by user 0

      1) During initial reindex after the upgrade, I got many of these messages in dspace.log.

      2) When accessing a restricted bitstream (restricted to a group) as Anonymous in XMLUI, instead of being redirected to the login page, I get the XMLUI error page with the following stack trace:

      org.dspace.authorize.AuthorizeException: Authorization denied for action READ on BITSTREAM:9134 by user 0
      at org.dspace.authorize.AuthorizeManager.authorizeAction(AuthorizeManager.java:182)
      at org.dspace.authorize.AuthorizeManager.authorizeAction(AuthorizeManager.java:101)
      at org.dspace.content.Bitstream.retrieve(Bitstream.java:586)
      at org.dspace.app.xmlui.cocoon.BitstreamReader.setup(BitstreamReader.java:372)
      at sun.reflect.GeneratedMethodAccessor91.invoke(Unknown Source)

      For the same item in JSPUI, I do get the login page.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                l_a_p Luigi Andrea Pascarelli
                Reporter:
                helix84 Ivan Masár
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: