GraphQL: Improve Error Message for Unauthorized Page Request

[fmontes]

Problem Statement

When making a GraphQL request for a working page (edit mode) without authentication, dotCMS returns a 500 error without providing any useful error message.

Steps to Reproduce

gql-permission-error.mp4

Acceptance Criteria

Beta Give feedback

1. Unauthorized query request should return a correct error message

An example error could be:

Unauthorized: You do not have the necessary permissions to request this page in edit mode. Please contact your administrator for assistance or try again with appropriate writing permissions.

External Links

N/A

Assumptions & Initiation Needs

N/A

Quality Assurance Notes & Workarounds

Currently, there is no workaround for this issue. QA testing should focus on verifying that the error message is improved when making unauthorized GraphQL requests for working pages.

[rjvelazco]

Passed Internal QA

• Tested on docker image: [dotcms/dotcms:trunk_2e54089]

Video

iqa-29270-graphql-improve-error-message-for-unauthorized-page-request-1.mov

Test Case

Query:

query {
  page( url: "/index", pageMode: "WORKING") {
    title
  }
}

Response

{
  "errors": [
    {
      "message": "Exception while fetching data (/page) : Unauthorized: You do not have the necessary permissions to request this page in edit mode.",
      "locations": [
        {
          "line": 2,
          "column": 3
        }
      ],
      "path": [
        "page"
      ],
      "extensions": {
        "classification": "DataFetchingException"
      }
    }
  ],
  "data": {
    "page": null
  }
}

[bryanboza]

Fixed and tested in the latest trunk, and now we have a clearer error message.