chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jeff Potts (JIRA)" <>
Subject [jira] [Commented] (CMIS-809) cmislib applyACL method has multiple issues
Date Tue, 03 Jun 2014 23:58:01 GMT


Jeff Potts commented on CMIS-809:

I see now that the AtomPub binding is supposed to accept a PUT of the XML representing the
state of the ACL the caller wants to set. So the original implementation approach is okay,
but there are still definitely issues. I'm looking into it now.

The BrowserBinding will need to accept the add ACE and remove ACE lists. I'll implement it
to minimize the difference in the API between the two bindings.

As a side-note, as part of investigating this I may have found a bug in Alfresco related to
ACLs, logged here:

> cmislib applyACL method has multiple issues
> -------------------------------------------
>                 Key: CMIS-809
>                 URL:
>             Project: Chemistry
>          Issue Type: Bug
>          Components: python-cmislib
>    Affects Versions: cmislib 0.5.1
>            Reporter: Jeff Potts
>            Assignee: Jeff Potts
> The testApplyACL() unit test is failing against Apache Chemistry 0.11.0. In addition,
certain use cases are not handled properly, such as adding two different permissions for the
same principal. Currently only the last one in the ACL is applied.
> This was originally implemented by accepting an ACL object that represented the ACL the
caller wanted on the document, then doing a PUT against the object's ACL.
> On further review of the spec, the applyACL method should be refactored to accept an
add list and a remove list. As part of this, the case where duplicate principals are added
to the same list needs to be incorporated.
> The unit test could also be beefed up.

This message was sent by Atlassian JIRA

View raw message