Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-3446

Non-admin submitter cannot remove uploaded bistreams during the submission

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 6.0
    • Fix Version/s: 6.1
    • Component/s: None
    • Labels:
    • Attachments:
      0
    • Comments:
      2
    • Documentation Status:
      Not Required

      Description

      As reported here https://groups.google.com/forum/#!topic/dspace-tech/deXaHGm-09U a submitter who is not a member of the Administrator group cannot remove a bitstream in the submission from which he uploaded previously.

      The resulting error message is "Authorization denied for action WRITE on BITSTREAM:1995e149-c7f6-4cd5-ac2f-553a050bdbdd by user 4d1b0e95-7e81-4d80-a3ac-2c25bdbde192". The corresponding stack trace is:

      org.dspace.authorize.AuthorizeException: Authorization denied for action WRITE on BITSTREAM:1995e149-c7f6-4cd5-ac2f-553a050bdbdd by user 4d1b0e95-7e81-4d80-a3ac-2c25bdbde192
      	at org.dspace.authorize.AuthorizeServiceImpl.authorizeAction(AuthorizeServiceImpl.java:157)
      	at org.dspace.authorize.AuthorizeServiceImpl.authorizeAction(AuthorizeServiceImpl.java:95)
      	at org.dspace.authorize.AuthorizeServiceImpl.authorizeAction(AuthorizeServiceImpl.java:89)
      	at org.dspace.content.BitstreamServiceImpl.update(BitstreamServiceImpl.java:219)
      	at org.dspace.content.BitstreamServiceImpl.delete(BitstreamServiceImpl.java:262)
      	at org.dspace.content.BitstreamServiceImpl.delete(BitstreamServiceImpl.java:41)
      	at org.dspace.content.BundleServiceImpl.removeBitstream(BundleServiceImpl.java:199)
      	at org.dspace.submit.step.UploadStep.processRemoveFile(UploadStep.java:452)
      	at org.dspace.submit.step.UploadStep.doProcessing(UploadStep.java:237)
      	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
      	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.lang.reflect.Method.invoke(Method.java:498)
      	at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:155)
      	at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:243)
      ...
      

      I reproduced this issue locally since the submission process for the submitter account on DSpace Demo is blocked by another bug.

      The root cause is that the resource policies are removed from the bitstream before the bitstream is updated.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              tom.desair Tom Desair
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: