401 responses on filtered page for anonymous user

Maintainers usually reply within 1 day

Assessment

This issue has not been assessed yet.

Description

Describe the bug

When I visit a browse by page (eg. https://demo.dspace.org/browse/dateissued?bbm.page=1&startsWith=2023) and open the developer tools, I see multiple requests that result in 401 responses. I assume they are related to features only an admin should be able to access. These requests should not be made, there should be a check in place that only authorized users fire these requests.

Failing requests were observed on these paths:
/server/api/system/scripts/metadata-import
/server/api/system/scripts/metadata-export

The bug is present in both DSpace 9.3. and 10.

To Reproduce

Steps to reproduce the behavior:

1. Open https://demo.dspace.org/browse/dateissued?bbm.page=1&startsWith=2023 as an anonymous user
2. Open the dev tools and the console or network tab and observe the failed requests

Note: This does not happen everytime, likely because of a race condition with observables in the frontend code. Just try it out several times.

Expected behavior

When visiting browse-by pages as an anonymous user, I don't encounter 401 errors/responses.

Related work

Similar to https://github.com/DSpace/dspace-angular/issues/5931, fix is here: https://github.com/DSpace/dspace-angular/pull/5932

Getting set up

First steps

1. Read the whole issue, then the project's contributing guide.
2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
3. Fork the repository and make your change on a branch.
4. Open a pull request that references the issue number.

More from DSpace/dspace-angular

• Metadata-level security toggles need visible focus

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility affects: 10.x affects: main bug ux

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  DSpace/dspace-angular#6531 · 1 comment · Opened Nov 12, 2026

  Maintainers usually reply within 1 day

• Audit logs are not fully keyboard navigable

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility affects: 10.x affects: main bug help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 66/100

  DSpace/dspace-angular#6530 · Opened Nov 12, 2026

  Maintainers usually reply within 1 day

• Submission Form Allows Deletion of All Repeating Item Entries

  Possibly taken @Rowan-McKereghan claimed this 5 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  affects: 8.x affects: 9.x bug component: submission

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  DSpace/dspace-angular#6511 · 2 comments · 1 assignee · Opened Nov 3, 2026

  Maintainers usually reply within 1 day

• Visual issues with qualdrop fields

  Possibly taken @DanGastardelli claimed this 15 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  affects: 10.x affects: 9.x bug claimed: Acervos Digitais component: submission Difficulty: Low ux

  Difficulty 2/5 1-3 hours Newbie friendliness 66/100

  DSpace/dspace-angular#6412 · 3 comments · 1 assignee · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Facet headings have incorrect clickable area to expand/collapse

  Possibly taken @jesielviana claimed this 12 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility affects: 10.x affects: 8.x affects: 9.x bug ux

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  DSpace/dspace-angular#6364 · 3 comments · 1 assignee · Opened Oct 15, 2026

  Maintainers usually reply within 1 day

All issues in DSpace/dspace-angular

Similar issues

• fix(setup): OpenClaw's gateway never loads the board's plugin: its manifest has no activation.onStartup

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug parity

  Difficulty 2/5 1-3 hours Newbie friendliness 70/100

  WenyuChiou/agent-board#1489 · Opened Nov 14, 2026

  Maintainers usually reply within 1 day

• bug: composeDocument accesses serviceName property without checking fallback name fields

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area: bazaar bug complexity: medium

  Difficulty 2/5 1-3 hours Newbie friendliness 74/100

  accensa/x402-facilitator-stellar#779 · Opened Nov 14, 2026

  Maintainers usually reply within 1 day

• Console Email & Calendar: fix Add mailbox button, explain mailbox id, drop row bullets and capitalization

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue P4 size:S web-ui

  Difficulty 2/5 Half a day Newbie friendliness 85/100

  josephfung/curia#2600 · Opened Nov 14, 2026

  Maintainers usually reply within 1 day

• partysocket: new PartySocket() throws ReferenceError where there is no global crypto

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 62/100

  cloudflare/partykit#444 · Opened Nov 14, 2026

More TypeScript issues