View documentation of API backend as a regular user fails

[saralavanip]

Steps:

1. Visit https://nightly.apinf.io
2. Sign in as a owner
3. Go to 'Menu' and click on 'Manage API backend'
4. Go to Documentation
   • Upload document
   • Enter Documentation link
5. Click on 'Save' button
6. Sign out
7. Login as regular user (doesn't own API backend)
8. Go to 'Menu' and select 'Catalog'
9. Select any one of the API backends and click on 'View Details'
10. Click on 'Documentation'

Findings:

• Viewer: displays error " Can't read from server. It may not have the appropriate access-control-origin settings."
• No response when clicked on documentation link: user not notified of any errors

Browsers:
Operating system:
Linux : Ubuntu 14.04.03 LTS (Trusty)

Web Browsers:

1. Mozilla Firefox 44.0
2. Google Chrome 48.0.2564.103

Screenshots:

[bajiat]

@brylie Could this bug also be related to #1099?

[brylie]

@bajiat yes. It looks like the Swagger UI is using https. @saralavanip can you submit a screenshot of this issue that also includes the web browser URL bar?

[brylie]

It could also be related to our FileCollection permissions. I am getting a 403 error when trying to upload swagger files in the develop branch.

[saralavanip]

@brylie , please find the screenshot of this issue with browser URL bar.

Screenshot:

[bajiat]

@saralavanip You are in http, so the error is caused by #1109. But when we tried to view the Swagger file in https, we got another error. Can you provide the Swagger file so that we can see if it is valid Swagger. Thanks!