Handling of get sub projects without having access to it
Opened this issue · 0 comments
maierthomas commented
In sw360 portal users can link projects to the selected project as kind of a sub project.
The user can see this relation in the following menus:
- linked releases and projects (Projects)
- is used by the following projects (Components)
For each project users can set individual project visibilities (group, moderators, everyone, private).
Therefore it can be possible that some projects are linked to projects with visibility group or private..
This will result that projects are linked, but the user does not have access to them.
In the current implementation sw360portal (ProjectDatabaseHandler, getProjectById
) throws a generic sw360exception in case of getting information about the linked project.
- add additional exception, e.g. 403 forbidden
- usages of this method should be modified, individually decision of exception handling