API Call POST /Downloads Does Not Work for Records

The customer has a requirement to use the api-explorer call, https://api-explorer.alfresco.com/api-explorer/#!/downloads/createDownload, to create a download node which is comprised of zipped records and files.  If the request contains a nodeId that is a record then a “403 permission is denied” error occurs.  However, if the nodeId used is that of a folder, with the folder containing records, then the download will work successfully.

Supporting Evidence

Steps to Reproduce:

1. Deploy an ACS 6.2 with AGS 3.2.0 environment.
2. Login to Alfresco as an Admin user.
3. Create a new collaboration site “Test”.
4. In the document library create a folder “New”.
5. Upload several files to the “New” folder.
6. Use the “Declare as Record” action to make some of the files records.
7. Obtain the nodeId’s for the “New” folder, one of the files, and one of the records.
8. Using the api POST /downloads add a file nodeId to the DownloadBodyCreate section.
9. Click on “Try it out!” and you’ll see a successful Response Code of 202.
10. Now repeat steps 8 and 9 using the nodeId of a record and you’ll receive a Response Code of 403, Permission was denied.
11. Repeat steps 8 and 9 using the nodeId of the “New” folder, which contains records and files, and you’ll receive a successful Response code of 202.
12. If you repeat the call listing out separate nodeId’s in the DownloadBodyCreate section, that include records and files, you will also get an unsuccessful Response Code of 403, Permission was denied.
13. The issue with the records can also be replicated in a Share UI site document library when using the “Selected Items” dropdown action “Download as Zip”.

Observed Behavior:  The api POST /downloads request will not work if the nodeId is a record.

Expected Behavior:  The api POST /downloads request should work if the nodeId is a record.

Reference JIRA's:

https://issues.alfresco.com/jira/browse/RM-2468

https://issues.alfresco.com/jira/browse/ALF-21375