This issue has been created
There are 2 updates.
 
 
Release Notes Application / cid:jira-generated-image-avatar-aed779a4-406d-44a9-8fed-ba2db8190643 RN-131 Open

A script can create a change for a release note that does not exist

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-1db8baeb-8cdf-4f8f-a4a0-ee4bcc4dc3f7 Vincent Massol created this issue on 30/Sep/26 16:23
 
Summary: A script can create a change for a release note that does not exist
Issue Type: cid:jira-generated-image-avatar-aed779a4-406d-44a9-8fed-ba2db8190643 Bug
Affects Versions: 2.7
Assignee: Unassigned
Components: Application
Created: 30/Sep/26 16:23
Priority: cid:jira-generated-image-static-major-7abb139d-f717-4653-9bd3-980a64c3d419 Major
Reporter: Vincent Massol
Description:

Steps to reproduce

  1. In a wiki with no release note for the version 9.9 of XWiki, run as a user who may edit the ReleaseNotes.Data space:
    {{velocity}}
    #set ($reference = $services.releasenotes.createChange({'product': 'XWiki', 'version': '9.9', 'title': 'Orphan'}))
    $reference
    {{/velocity}}
    

Expected

The call fails, as POST /rest/wikis/xwiki/releasenotes/XWiki/9.9/changes does (404 "There is no release note for the version [9.9] of [XWiki].").

Actual

The change is created in ReleaseNotes.Data.XWiki.9\.9.Entry001.WebHome, under a release note page that does not exist. No release note lists it, and the space is left with an orphan page.

The REST endpoint checks that the release note exists before creating a change, while the script service goes straight to the change manager.

 
 

2 updates

 
cid:jira-generated-image-avatar-1db8baeb-8cdf-4f8f-a4a0-ee4bcc4dc3f7 Changes by Vincent Massol on 30/Sep/26 16:23
 
Fix Version: 2.8
Assignee: Vincent Massol