Bug #23131
closedAutopublication task has too many rights
0%
Description
Inside the Scheduler task for autopublication of workspaces, the user rights are temporarily set to admin, but they are not lowered again (if needed). This was not really an issue when this piece of code was called by a CLI script. However now that it is a Scheduler task, the proper rights must be reset when the task is finished, otherwise any Scheduler that may follow will be executed with admin rights too.
NOTE: the really clean way would be for the _cli_scheduler user to have the proper rights, but the rights management in workspaces is so convoluted, that I couldn't find how to set this up properly (and the error messages are not really helpful either). This may be worth a second look once the workspaces have been through the planned improvements.
(issue imported from #M15048)
Files