Hi,
I've set all the collection admin authorization settings to true in local.cfg, but when I go to edit the item/bundle/bitstream authorization policies (as a collection admin), the group fields and search list are blank. I can't enter, search, or select anything.
The AI chatbot analyzed my logs and had this to say:
EPerson Search Failure: granted=false, expressionAttribute=hasAuthority('ADMIN') || hasAuthority('MANAGE_ACCESS_GROUP')
The UI is trying to look up the EPerson/Group attached to the policy, but Spring Security is saying: "Only a System Admin or someone in the Manage Access Group can call this method."
Resource Policy Read Failure: granted=false, expressionAttribute=hasPermission(#id, 'resourcepolicy', 'READ')
Even though the user is a Collection Admin, the system is failing to grant the READ permission on the specific policy object (ID 655762).
Is this expected behaviour? A bug?
Regards,
John Rodriquez