Bug 1104909

Summary:	Vibe405: Can't be able to see the version entries for non-admin user
Product:	[Micro Focus Vibe] Vibe	Reporter:	Rose Tian <roserongxian.tian>
Component:	Workspace	Assignee:	David Lewis <david.lewis>
Status:	VERIFIED FIXED	QA Contact:	Ira Messenger <ira.messenger>
Severity:	Normal
Priority:	P3 - Medium	CC:	anna.wang, brian.odwyer, dongyan.liu, jiangong.li, stephanie.leavitt, yli
Version:	4.0.5	Keywords:	CCB, Functionality
Target Milestone:	4.0.5
Hardware:	x86-64
OS:	SLES 15
Whiteboard:
Found By:	i18n Test	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Rose Tian 2018-08-15 10:05:44 UTC

Test Environment:
Server OS: SLES 15 GM with German
Build: vibe-4.0.5-linux_20180811015308.tar
Client: win7+Firefox

Steps:

1. Non-admin user login web page of Vibe;
2. Go to anyone folder, for example: go to the Blog;
3. Create a blog entry,then open the entry;
4. On the opened view entry page,click the 'Entry History' tab;

Actual result:

There isn't a version entry.

After modifing the blog entry some times,there are still no any version entries to be listed.

Notes:
Admin login vibe and navigagte to the entry history tab page, all the version entries are listed for admin.

Comment 1 David Lewis 2018-08-16 21:00:29 UTC

This is a regression and only occurs in the user's workspace. The user can't see the entry history of his/her own entries.

In Vibe 3.x, users were given rights to view each other's workspaces by default. This changed during one of the 4.0.x releases. We do some basic ACL checks when looking up the entry history, and it was the fact that all users had read rights to the user's workspace that allowed the user to see entry history. We weren't taking into account the fact that the user is the owner of the entry.

I've fixed this so the owner of the entry is always allowed to see the entry history.

Comment 2 Novell Build 2018-08-17 10:05:57 UTC

This fix is in the Vibe OnPrem 4.0.5 build 20180817015318.  open source project revision 24065, and closed source project revision 8394.

Comment 3 Rose Tian 2018-08-20 05:58:07 UTC

Verify this issue in the latest vibe build_0817,it is fixed.