Defect #9308: Search fails when a role haven't "view wiki" permission - Redmine

Actions

Copy link

Defect #9308

closed

Search fails when a role haven't "view wiki" permission

Added by pasquale [:dedalus] almost 14 years ago. Updated over 13 years ago.

Status:

Closed

Priority:

High

Assignee:

Category:

Search engine

Target version:

1.2.2

Start date:

2011-09-22

Due date:

% Done:

Estimated time:

Resolution:

Fixed

Affected version:

1.2.1

Description

I have configured a role that haven't the "view wiki" permission.
When a user that has this role (in all projects) search for some word, redmine fails with this message (bug-in-action.jpg)
If I grant the permission to the role, all works fine.
This is a major bug because normal user can think that the site don't work.

In the log file, I see that the query fails on where condition because "text" field is unknown.

ps: the behavior of redmine in this case is very strange: for example, if I search for mail I have an error, but if I search for mail. all works fine

Files

bug-in-action.jpg (50.7 KB) bug-in-action.jpg

pasquale [:dedalus], 2011-09-22 21:24

Actions

Copy link

Updated by pasquale [:dedalus] almost 14 years ago

pasquale [:dedalus] wrote:

In the log file, I see that the query fails on where condition because "text" field is unknown.

this is the log message:


Processing SearchController#index (for 85.33.108.241 at 2011-09-22 11:57:15) [GET]
  Parameters: {"action"=>"index", "q"=>"mail", "controller"=>"search"}

ActiveRecord::StatementInvalid (Mysql::Error: Unknown column 'text' in 'where clause': SELECT * FROM `wiki_pages` 
WHERE ((1=0) AND (((LOWER(title) LIKE '%mail%') OR (LOWER(text) LIKE '%mail%'))))  ORDER BY wiki_pages.created_on 
DESC LIMIT 11):
  app/controllers/search_controller.rb:77:in `index'
  app/controllers/search_controller.rb:76:in `each'
  app/controllers/search_controller.rb:76:in `index'
  config/initializers/mongrel_cluster_with_rails_211_fix.rb:62:in `dispatch_cgi'

Actions

Copy link