If an user does have any permission on "Folder A", no permissions on "FolderB" and e.g. Editor permissions on "Folder C" containing a MS Office document,
he/she can trigger the Edit Online action - everything seems to work just fine:
- The document opens up in MS Office, he/she can make changes and save it without any error.
- MS Office says it has uploaded content on the server.
- Closing MS Office unlocks the document.
Nothing is really saved on the Alfresco server. The modifier, modified date, minor version and content are unchanged.
>> Edit Online breaks if the user does not have at least Consumer permissions on all folders pointing to the document in question.
[Steps to reproduce]:
1.) Create folders in repository as below and upload test docx file.
Repository -> FolderA -> FolderB -> FolderC -> test.docx
2.) Give a user (abeecher) Consumer permission on FolderA and Editor permission on FolderC.
3.) Try "Edit Online" with test.docx ===> It works fine
4.) Break Permission inheritance on FolderB
5.) As abeecher can't see FolderB and C anymore in repository, access to docx file via URL and try "Edit Online" with test.docx
===> It looks working fine but document is not updated after save and close.
Abeecher should be able to edit online and save it to repository OR Abeecher should receive Warning that she doesn't have permission to edit online.
Abeecher was able to access edit online, save and close but document didn't get updated. There was no warning either.
[Analysis to date]:
1.) Issue reproduced on Alfresco v5.1.2
2.) Test document attached
3.) Fiddler trace showing the HTTP 200 for the PUT call attached
4.) Log snippet for Put call:
5.) Screenshots demonstrating that the changes haven't been saved attached