Category: | Bug report |
Priority: | High |
Status: | New |
Project: | Severity: | Major |
Resolution: | Open |
|
Component: | Reproducibility: | Always |
Assigned to: |
Below are the permissions settings that I have my jasperserver project. I have a master jrxml file that is referenced by multiple reports as a repository jrxml file.
The problem is that I receive a "Access is denied" error when I have the permissions set to execute only on the 'Master Report.jrxml' file in the repository.
Changing the settings to read only removes the "Access is denied" error but it allows the user the see the JRXML file/s.
root
|-->Data Source
| |-->my data source <--ROLE_USER execute only, USER1 no access
|
|-->JRXML Files <--ROLE_USER execute only, USER1 no access
| |-->Master Report.jrxml <--permissions inherited
| |
| |-->sub reports <--permissions inherited
| |-->sub_report1.jrxml <--permissions inherited
| |-->sub_report2.jrxml <--permissions inherited
|
|-->company
|-->state
|-->division
|-->section 1
|--> Report from repository file (Master Report.jrxml) <--ROLE_USER no access, USER1 Read only
The server has encountered an error. Please excuse the inconvenience.
Error Message
org.springframework.security.AccessDeniedException: Access is denied
Error Trace
org.springframework.security.AccessDeniedException: Access is denied
at org.springframework.security.vote.AffirmativeBased.decide(AffirmativeBased.java:68)
at org.springframework.security.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:262)
at org.springframework.security.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:63)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy5.getResource(Unknown Source)