PUBLIC projects not visible to external users — membership filter ignores PUBLIC visibility (SZ-134)
rk@tigase.net opened 19 hours ago

Summary

PUBLIC projects are not visible to external users. External users see only projects they are explicit members of, regardless of project visibility level.

Steps to Reproduce

  1. Create a PUBLIC project (e.g. test-public, id=28)
  2. Log in as any external user (CUSTOMER, PARTNER, GUEST, COMMUNITY) who is not a member of the project
  3. Navigate to the project list

Expected Behavior

PUBLIC projects should appear in the project list for all authenticated users including external users, without requiring explicit membership.

Actual Behavior

External user extuser2 (GUEST) sees "No projects found" despite test-public having visibility=PUBLIC.

  • rk@tigase.net commented 19 hours ago

    Root Cause

    ProjectRepository.findProjectsByMember() filters strictly by membership with no carve-out for PUBLIC visibility:

    SELECT p FROM Project p JOIN p.members m WHERE m.user = :user
    

    PUBLIC projects with no membership record for the external user are excluded entirely.

    Proposed Fix

    Extend the query to include PUBLIC projects regardless of membership:

    SELECT DISTINCT p FROM Project p LEFT JOIN p.members m 
    WHERE m.user = :user OR p.visibility = 'PUBLIC'
    

    Affected Components

    • ProjectRepository.findProjectsByMember()
    • ProjectServiceImpl (caller — external user branch)
  • rk@tigase.net changed title 19 hours ago
    Previous Value Current Value
    PUBLIC projects are not visible to external users
    PUBLIC projects not visible to external users — membership filter ignores PUBLIC visibility
  • rk@tigase.net commented 5 hours ago

    Amending release/1.10.0

  • rk@tigase.net changed state to 'In Progress' 5 hours ago
    Previous Value Current Value
    Open
    In Progress
  • rk@tigase.net commented 4 hours ago

    Fix merged into wolsonsc

  • rk@tigase.net changed state to 'Closed' 4 hours ago
    Previous Value Current Value
    In Progress
    Closed
issue 1 of 1
Type
Bug
Priority
Major
Assignee
Version
none
Sprints
n/a
Customer
n/a
Issue Votes (0)
Watchers (3)
Reference
SZ-134
Please wait...
Page is in error, reload to recover