#128 AttachFS does not gracefully handle permissions denied

Future
open
nobody
2013-04-02
2013-02-20
No

Users without folder permission, currently receive an error:
Message: Unable to find array key "folderObjectId" in path "folderObjectId"
AttachFS should return a HTTP/403 in this case.

Discussion

  • Adam Tauno Williams

    related to Morrison Industries internal ticket #83794568

     
  • Adam Tauno Williams

    awilliam@linux-86wr:~> curl -v -u $LOGNAME -T  /etc/passwd  http://coils*******/attachfs/183580/test1.txt?mode=file
    * About to connect() to coils.mormail.com port 80 (#0)
    *   Trying 192.168.1.47...
    * connected
    * Connected to coils.mormail.com (192.168.1.47) port 80 (#0)
    * Server auth using Basic with user 'somebody'
    > PUT /attachfs/183580/test1.txt?mode=file HTTP/1.1
    > Authorization: Basic **********************8
    > User-Agent: curl/7.28.1
    > Host: coils.mormail.com
    > Accept: */*
    > Content-Length: 1801
    > Expect: 100-continue
    > 
    < HTTP/1.1 100 Continue
    * We are completely uploaded and fine
    < HTTP/1.1 500 Coils Exception
    < Date: Tue, 02 Apr 2013 15:17:52 GMT
    < Server: BaseHTTP/0.3 Python/2.6.5
    < Content-Length: 53
    < Content-Type: text/plain; charset=UTF-8
    < Connection: close
    < 
    * Closing connection #0
    objectId#183580 [Folder] not available for attachmentawilliam@linux-86wr:~>
    
     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks