From eea38e05909b59cef040286dc9fbd5172b8f0a8b Mon Sep 17 00:00:00 2001 From: Andreea Dragoi Date: Tue, 22 Mar 2016 14:33:37 +0000 Subject: [PATCH] Merged 5.1.N (5.1.2) to 5.2.N (5.2.1) 124349 adavis: Merged 5.1.0-CLOUD43 (Cloud ) to 5.1.N (5.1.2) 123596 skopf: ACE-2540 git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/BRANCHES/DEV/5.2.N/root@124367 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261 --- .../opencmis/PublicApiAlfrescoCmisService.java | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/source/java/org/alfresco/opencmis/PublicApiAlfrescoCmisService.java b/source/java/org/alfresco/opencmis/PublicApiAlfrescoCmisService.java index 38459029d8..f4e8711b91 100644 --- a/source/java/org/alfresco/opencmis/PublicApiAlfrescoCmisService.java +++ b/source/java/org/alfresco/opencmis/PublicApiAlfrescoCmisService.java @@ -125,9 +125,19 @@ public class PublicApiAlfrescoCmisService extends AlfrescoCmisServiceImpl @Override public RepositoryInfo getRepositoryInfo(String repositoryId, ExtensionsData extension) { - checkRepositoryId(repositoryId); + Network network = null; + + try + { + checkRepositoryId(repositoryId); + network = networksService.getNetwork(repositoryId); + } + catch(Exception e) + { + // ACE-2540: Avoid information leak. Same response if repository does not exist or if user is not a member + throw new CmisObjectNotFoundException("Unknown repository '" + repositoryId + "'!"); + } - Network network = networksService.getNetwork(repositoryId); return getRepositoryInfo(network); }