Catalog Mode in Data Security doesn't work for insert and update transactions

Description

Setting up catalog mode as challenge in data security does not work correctly for insert and update transactions.

When setting up a write rule and catalog mode as challenge, the server does not send a 401 error for insert and update transactions. Instead, it sends a 200 with a "InvalidParameterValue" exception code. As for the delete transaction it works.

Example:

Url: http://localhost:8080/geoserver/wfs?service=WFS&version=1.1.0&request=Transaction

Post content:

Server Response:

EDIT: I have a machine running version 2.7.6 and it correctly sends a 401 on update and insert. I am not sure on which version this bug was introduced though.

Thanks in advance!

Environment

None

Status

Assignee

Unassigned

Reporter

João Gouveia

Triage

Fix versions

None

Affects versions

Priority

Medium
Configure