jmix icon indicating copy to clipboard operation
jmix copied to clipboard

MainView skips checking anonymous access when nested anonymous view is opened

Open Flaurite opened this issue 1 year ago • 0 comments

Environment

Jmix: 2.2.x

Steps to reproduce

The case is the following:

  • MainView does not have anonymous access
  • BlankView - with layout = MainView.class` has anonymous access

The direct link to BlankView opens BlankView and MainView even if it does not have anonymous access.

ER

The direct link to BlankView should raise Access denied since lack of anonymous access to MainView

Flaurite avatar Mar 18 '24 15:03 Flaurite