task #8424
openevaluate publish flags in the full derivative path
0%
Description
eu.etaxonomy.cdm.remote.controller.OccurrenceController.doGetOccurencesDTO(@PathVariable(value="uuid") UUID uuid, HttpServletRequest request, HttpServletResponse response)
In doGetFieldUnitDTO
maybe also in other methods, the publish flag is checked only for the derivative for which the uuid is passed to the method. Originals are not checked though!
All DerivedUnits need to be checked though. The actual processing of the DerivedUnits takes place in the OccurrenceServiceImpl, therefore checking the publish flag must be done there.
During a call with Katja we discussed as solution to let the service check all the publish flags. In case one element in the derivation path is protected the service will throw an exception (UnpublishedEntityAccessException) which is caught by the controller to respond to the client in an appropriate way. By this the we can avoid exposing protected data from the FieldUnit which is included into the titleCache of derivatives.
Related issues
Updated by Andreas Kohlbecker over 3 years ago
- Copied from task #8414: occurrence controller code cleaning and harmonization added
Updated by Andreas Müller over 3 years ago
As far as I know the SpecimenOrObservation publish flag is not evaluated by webservices at all, yet (or only in very few cases). So this ticket should better be part of be transformed into a ticket which generally is about implementing publish flag evaluation for SpecimenOrObservation similar to the TaxonBase publish flag evaluation.
Updated by Andreas Müller over 3 years ago
- Related to task #3560: Withheld unpublished taxa from webservice used in E+M dataportal added
Updated by Andreas Müller almost 2 years ago
- Related to bug #9559: OccurrenceServiceImpl.findRootUnitDTOs() and related methods suppress unpublished units added
Updated by Andreas Müller almost 2 years ago
- Tags changed from permission to permission, specimen
Updated by Andreas Müller about 2 months ago
- Related to feature request #10206: Add publish flag to description base added