Send Email sub-action doesn't set the current user to $dotcontent viewtool

[dsolistorres]

Parent Issue

No response

Problem Statement

Users can include velocity code in the body field for the Send Email actionlet so the workflow action executes the velocity code to build the email body. However, the $dotcontent viewtool methods are executed with the 'anonymous' user instead of the current user that executed the workflow action, causing that the $dotcontent.find() method cannot retrieve the current contentlet. This only happens if current contentlet is not public, meaning that the anonymous user doesn't have permissions to access the content.

Steps to Reproduce

1. Create a new workflow scheme and add the 'Send email' actionlet in a workflow action (or just include the 'Send email' actionlet in an already existing scheme.
2. Include the following velocity code in the Email body field for the 'Send email' actionlet:

$dotcontent.find($content.identifier)

3. Create a new contentlet and make sure that there are not read permission for the anonymous user for the content.
   
4. Execute the workflow action that includes the 'Send email' actionlet for the contentlet created in the previous step.
5. The $dotcontent.find() method doesn't return the current content and the following warning message is shown in the log:

[24/04/24 14:19:48:569 CST]  WARN util.ContentUtils: An error occurred when User 'anonymous' attempted to find Contentlet with Inode/ID '25ee651e-b714-4fc7-a464-cf45d1e893c0' [lang=1, tmDate=null]: User 'anonymous' does not have READ permissions on Contentlet [name: Article 1, type: Article, lang: 1, identifier: 52aad5d9f76fb0eab5dad3c314944b72, inode: 25ee651e-b714-4fc7-a464-cf45d1e893c0] @ url:POST//default/dwr/call/plaincall/BrowserAjax.saveFileAction.dwr | lang:1 | ip:0:0:0:0:0:0:0:1 | Admin:true | start:04-24-2024 02:19:38 CST  ref:https://localhost:8443/c/portal/layout?p_l_id=71b8a1ca-37b6-4b6e-a43b-c7482f28db6c&p_p_id=content&p_p_action=0&&dm_rlout=1&r=1713989977185&in_frame=true&frame=detailFrame&container=true&angularCurrentPortlet=content

Acceptance Criteria

The $dotcontent viewtool should use the current user that executed the workflow when executing the velocity code for Email body in the Send Email actionlet. The $dotcontent.find() method should return the requested contentlet given that the current user the executed the action has read permissions for the content.

dotCMS Version

24.04.16

[bryanboza]

Fixed, unable to reproduce after the fix. Tested on the latest trunk // Docker // FF