Opening Story containing Shape object generates 401 error

[stascher]

Hello,

When I create an unpublished story and add a shape object to a story sheet, then exit storytelling and then go back into My Own story folder, I am prompted to re-login. Even if I just switch between the Community story folder and My Own story folder, I am always prompted to re-login. 

If I have the developer console open in my browser, I see an 401 (Unauthorized) error being generated when trying to load the shape's svg file.  If I remove the shape object, the problem goes away.  We have security rules around being able to create stories, do we also need a security rules to embed/access shape images?

Regards,

Steven

[dmnas]

---

@staschertally counter wrote:

Hello,

When I create an unpublished story and add a shape object to a story sheet, then exit storytelling and then go back into My Own story folder, I am prompted to re-login. Even if I just switch between the Community story folder and My Own story folder, I am always prompted to re-login. 

If I have the developer console open in my browser, I see an 401 (Unauthorized) error being generated when trying to load the shape's svg file.  If I remove the shape object, the problem goes away.  We have security rules around being able to create stories, do we also need a security rules to embed/access shape images?

Regards,

Steven

---

Yes you need security rules for shape images too, since the 401 comes from the shape’s SVG file request not being authorized.

[stascher]

Thanks for the reply. Any chance you can give me an idea of what that security rule would look like? Is there a resource.objectType of "image"? 

Regards,

Steven