Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-3469

virus scan during submission attempts to read uploaded bitstream as anonymous user, which fails

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 6.0
    • Fix Version/s: 6.1
    • Component/s: DSpace API
    • Labels:
      None
    • Attachments:
      0
    • Comments:
      8
    • Documentation Status:
      Not Required

      Description

      With the vscan curation task enabled as part of the submission workflow, any file uploaded causes the following error to be thrown:

      java.io.IOException: Authorization denied for action READ on BITSTREAM:76039a9b-70dd-4b5d-9c71-72a66e3eaee3 by user null
      

      Looking at the code that calls the curation task I can see that no context is passed to the curate command at the next line. Mark Wood, who helped me analyze this bug, also noted that the curate method seems to want an object ID and not the object itself. So, probably we need to tweak line 617 a bit to pass the current context object, and to pass an object id. Or we can rewrite the curate method to "do the right thing" when it's passed an object.

        Attachments

          Activity

            People

            • Assignee:
              mwood Mark H. Wood
              Reporter:
              hardyoyo Hardy Pottinger
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: