ESC multicolor-gradient-portal.svg - 403 Forbidden error

[MrCheck]

First off, I would have put this in a more appropriate board, but I didn't see one for Service Portals, Employee Service Center, or anything that made any real sense.  So, I winged it.  Hopefully someone can move it to where it actually belongs.

I'm having this problem with an instance and after troubleshooting for a bit, decided to try it with a PDI.

• Brand new instance running Australia.
• Create a new test user, grant them no roles or groups
• Impersonate the user
• Load developer tools in your browser, Network tab
• Navigate to /esc

Note the red file in the Network tab listed with Status Code 403 Forbidden. That's actually the id for the attachment where multicolor-gradient-portal.svg is stored. Also, note that the blue/green background on the page isn't there.

Now End Impersonation. Notice the blue green background appears and the same file on the network tab now loads fine with a Status Code 200 OK.

In trying to track this down, I noticed that if I granted the test user the Knowledge Manager role, then the background loads. There appears to be about 18 ACLs that have to return false in order for the file to be blocked and adding Knowledge Manager makes it through one of them.

Is this on purpose? If so, why would a file that's part of a theme allow the rest of it to load, but that one file be blocked?  I know several ways to fix this so I'm not really looking for a fix.  I'm more looking for a why.  Maybe I'll learn something.  It just seems strange that it works this way out of the box.   Preview the theme and it looks one way. Have a user load it and it looks different because of an ACL.  Bug maybe?

Thanks,

Robert "Check" Adamczyk