Handle situation where user does not have access to referenced entry

Description

In this particular case a user tried to remove an entry that referenced an other entry (not accessible by the user) in the metadata:

Caused by: org.entrystore.repository.RepositoryException: Error in connection to repository at org.entrystore.impl.ContextImpl.remove(ContextImpl.java:886) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.rest.resources.EntryResource.removeRepresentations(EntryResource.java:188) ~[entrystore-rest-5.5.0.jar:?] at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source) ~[?:?] at java.base/java.lang.reflect.Method.invoke(Unknown Source) ~[?:?] at org.restlet.resource.ServerResource.doHandle(ServerResource.java:511) ~[org.restlet-2.4.4.jar:?] ... 71 more Caused by: org.entrystore.AuthorizationException: User https://catalog.sodertalje.se/store/_principals/resource/30 not authorized for: ReadMetadata https://catalog.sodertalje.se/store/6/entry/8 at org.entrystore.impl.PrincipalManagerImpl.checkAuthenticatedUserAuthorized(PrincipalManagerImpl.java:372) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.ContextImpl.checkAccess(ContextImpl.java:578) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.ContextManagerImpl.getEntry(ContextManagerImpl.java:904) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.ContextManagerImpl.getEntry(ContextManagerImpl.java:891) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.MetadataImpl.removeGraphSynchronized(MetadataImpl.java:157) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.EntryImpl.remove(EntryImpl.java:1606) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.impl.ContextImpl.remove(ContextImpl.java:873) ~[entrystore-core-impl-5.5.0.jar:?] at org.entrystore.rest.resources.EntryResource.removeRepresentations(EntryResource.java:188) ~[entrystore-rest-5.5.0.jar:?] at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source) ~[?:?] at java.base/java.lang.reflect.Method.invoke(Unknown Source) ~[?:?] at org.restlet.resource.ServerResource.doHandle(ServerResource.java:511) ~[org.restlet-2.4.4.jar:?] ... 71 more

Environment

None

Activity

Show:

Details

Assignee

Reporter

Fix versions

Priority

Created February 25, 2025 at 11:10 AM
Updated March 27, 2025 at 3:03 PM