Jose: good question. The empty response articulates that the resource does not exist. In this case, the resource does exist, but the client is not allowed to view it. I would lean towards throwing an exception. In the case of permissions changing along the lifecycle, at least the exception tells the client the resource never went away, it's permissions changed. Then again, this may or may not be a security issue telling a client that something is there, they just can't see it.
Maybe a clearer exception report?
From: Jose Garcia [mailto:[hidden email]]
Sent: Fri 31-Oct-14 04:18
To: Devel [hidden email] Subject: [GeoNetwork-devel] CSW GetRecordById Operation not allowed
The GetRecordById if provided the uuid of a non existing metadata it
returns an empty response.
But if provided the uuid of a metadata not allowed to the user it returns:
*Would not be better to return an empty response also, the error returned
looks pretty confusing. Looks fine if we change it?Regards,Jose García*
*GeoCat Bridge for ArcGIS allows instant publishing of data and metadata on
GeoServer and GeoNetwork. Visit http://geocat.net <http://geocat.net/> for
details. _________________________Jose GarcíaGeoCat bvVeenderweg 136721 WD
BennekomThe Netherlandshttp://GeoCat.net <http://geocat.net/>*