Return-Path: X-Original-To: apmail-jackrabbit-commits-archive@www.apache.org Delivered-To: apmail-jackrabbit-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E0AE2175C3 for ; Thu, 15 Oct 2015 10:24:09 +0000 (UTC) Received: (qmail 69523 invoked by uid 500); 15 Oct 2015 10:24:09 -0000 Delivered-To: apmail-jackrabbit-commits-archive@jackrabbit.apache.org Received: (qmail 69467 invoked by uid 500); 15 Oct 2015 10:24:09 -0000 Mailing-List: contact commits-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@jackrabbit.apache.org Delivered-To: mailing list commits@jackrabbit.apache.org Received: (qmail 69458 invoked by uid 99); 15 Oct 2015 10:24:09 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2015 10:24:09 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 52EF11809D7 for ; Thu, 15 Oct 2015 10:24:09 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.79 X-Spam-Level: * X-Spam-Status: No, score=1.79 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, T_RP_MATCHES_RCVD=-0.01] autolearn=disabled Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id XfS-ctE70sYd for ; Thu, 15 Oct 2015 10:24:04 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTP id A153C21277 for ; Thu, 15 Oct 2015 10:24:03 +0000 (UTC) Received: from svn01-us-west.apache.org (svn.apache.org [10.41.0.6]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id C7BF9E0749 for ; Thu, 15 Oct 2015 10:24:02 +0000 (UTC) Received: from svn01-us-west.apache.org (localhost [127.0.0.1]) by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id C05343A0176 for ; Thu, 15 Oct 2015 10:24:02 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r1708777 [2/2] - in /jackrabbit/site/live/oak/docs: ./ architecture/ coldstandby/ nodestore/ nodestore/segment/ oak-mongo-js/ oak_api/ plugins/ query/ security/ security/accesscontrol/ security/authentication/ security/permission/ security/... Date: Thu, 15 Oct 2015 10:24:02 -0000 To: commits@jackrabbit.apache.org From: davide@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20151015102402.C05343A0176@svn01-us-west.apache.org> Modified: jackrabbit/site/live/oak/docs/security/principal/cache.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/cache.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/cache.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/cache.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Caching Results of Principal Resolution @@ -213,7 +213,7 @@
    -
  • Last Published: 2015-10-05
    • +
  • Last Published: 2015-10-15
  • |
  • Version: 1.4-SNAPSHOT
    • Modified: jackrabbit/site/live/oak/docs/security/principal/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/differences.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/differences.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Principal Management : Differences wrt Jackrabbit 2.x @@ -213,7 +213,7 @@
      -
    • Last Published: 2015-10-05
      • +
    • Last Published: 2015-10-15
    • |
    • Version: 1.4-SNAPSHOT
      • Modified: jackrabbit/site/live/oak/docs/security/principal/principalprovider.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/principalprovider.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/principalprovider.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/principalprovider.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Implementations of the PrincipalProvider Interface @@ -213,7 +213,7 @@
        -
      • Last Published: 2015-10-05
        • +
      • Last Published: 2015-10-15
      • |
      • Version: 1.4-SNAPSHOT
        • Modified: jackrabbit/site/live/oak/docs/security/privilege.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Privilege Management @@ -213,7 +213,7 @@
          -
        • Last Published: 2015-10-05
          • +
        • Last Published: 2015-10-15
        • |
        • Version: 1.4-SNAPSHOT
          • Modified: jackrabbit/site/live/oak/docs/security/privilege/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/differences.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/differences.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Privilege Management : Differences wrt Jackrabbit 2.x @@ -213,7 +213,7 @@
            -
          • Last Published: 2015-10-05
            • +
          • Last Published: 2015-10-15
          • |
          • Version: 1.4-SNAPSHOT
            • Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Privilege Management : Mapping Privileges to Items @@ -213,7 +213,7 @@
              -
            • Last Published: 2015-10-05
              • +
            • Last Published: 2015-10-15
            • |
            • Version: 1.4-SNAPSHOT
              • Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Privilege Management : Mapping API Calls to Privileges @@ -213,7 +213,7 @@
                -
              • Last Published: 2015-10-05
                • +
              • Last Published: 2015-10-15
              • |
              • Version: 1.4-SNAPSHOT
                • Modified: jackrabbit/site/live/oak/docs/security/user.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user.html (original) +++ jackrabbit/site/live/oak/docs/security/user.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - User Management @@ -213,7 +213,7 @@
                  -
                • Last Published: 2015-10-05
                  • +
                • Last Published: 2015-10-15
                • |
                • Version: 1.4-SNAPSHOT
                  • Modified: jackrabbit/site/live/oak/docs/security/user/authorizableaction.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizableaction.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/authorizableaction.html (original) +++ jackrabbit/site/live/oak/docs/security/user/authorizableaction.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Authorizable Actions @@ -213,7 +213,7 @@
                    -
                  • Last Published: 2015-10-05
                    • +
                  • Last Published: 2015-10-15
                  • |
                  • Version: 1.4-SNAPSHOT
                    • Modified: jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html (original) +++ jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Authorizable Node Name Generation @@ -213,7 +213,7 @@
                      -
                    • Last Published: 2015-10-05
                      • +
                    • Last Published: 2015-10-15
                    • |
                    • Version: 1.4-SNAPSHOT
                      • Modified: jackrabbit/site/live/oak/docs/security/user/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/differences.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/user/differences.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - User Management : Differences to Jackrabbit 2.x @@ -213,7 +213,7 @@
                        -
                      • Last Published: 2015-10-05
                        • +
                      • Last Published: 2015-10-15
                      • |
                      • Version: 1.4-SNAPSHOT
                        • Modified: jackrabbit/site/live/oak/docs/security/user/expiry.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/expiry.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/expiry.html (original) +++ jackrabbit/site/live/oak/docs/security/user/expiry.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Password Expiry and Force Initial Password Change @@ -213,7 +213,7 @@
                          -
                        • Last Published: 2015-10-05
                          • +
                        • Last Published: 2015-10-15
                        • |
                        • Version: 1.4-SNAPSHOT
                          • @@ -579,7 +579,9 @@

                          Consumers of the repository already specify javax.jcr.SimpleCredentials during login, as part of the normal authentication process. In order to change the password for an expired user, the login may be called with the affected user’s javax.jcr.SimpleCredentials, while additionally providing the new password via a credentials attribute newPassword.

                          After verifying the user’s credentials, before checking expiry, said attribute is then used by the UserAuthentication to change the user’s password.

                          This way the user can change the password while the expiry check succeeds (password expired = false) and a session/login is provided at the same time.

                          -

                          This method of changing password via the normal login call only works if a user’s password is in fact expired and cannot be used for regular password changes (attribute is ignored, use User#changePassword directly instead).

                          +

                          This method of changing password via the normal login call only works if a user’s password is in fact expired and cannot be used for regular password changes (attribute is ignored, use User#changePassword directly instead).

                          +

                          Should the Password History feature be enabled, and - for the above password change - a password already in the history be used, the change will fail and the login still throw a CredentialExpiredException. In order for consumers of the exception to become aware that the credentials are still considered expired, and that the password was not changed due to the new password having been found in the password history, the credentials object is fitted with an additional attribute with name PasswordHistoryException. This attribute may contain the following two values:

                          +

                          “New password was found in password history.” or "“New password is identical to the current password.”

                          Modified: jackrabbit/site/live/oak/docs/security/user/history.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/history.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/history.html (original) +++ jackrabbit/site/live/oak/docs/security/user/history.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Password History @@ -213,7 +213,7 @@
                            -
                          • Last Published: 2015-10-05
                            • +
                          • Last Published: 2015-10-15
                          • |
                          • Version: 1.4-SNAPSHOT
                            • Modified: jackrabbit/site/live/oak/docs/security/user/membership.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/membership.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/membership.html (original) +++ jackrabbit/site/live/oak/docs/security/user/membership.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Group Membership @@ -213,7 +213,7 @@
                              -
                            • Last Published: 2015-10-05
                              • +
                            • Last Published: 2015-10-15
                            • |
                            • Version: 1.4-SNAPSHOT
                              • Modified: jackrabbit/site/live/oak/docs/security/user/query.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/query.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/query.html (original) +++ jackrabbit/site/live/oak/docs/security/user/query.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Searching Users and Groups @@ -213,7 +213,7 @@
                                -
                              • Last Published: 2015-10-05
                                • +
                              • Last Published: 2015-10-15
                              • |
                              • Version: 1.4-SNAPSHOT
                                • Modified: jackrabbit/site/live/oak/docs/use_getting_started.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/use_getting_started.html?rev=1708777&r1=1708776&r2=1708777&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/use_getting_started.html (original) +++ jackrabbit/site/live/oak/docs/use_getting_started.html Thu Oct 15 10:24:01 2015 @@ -1,13 +1,13 @@ - + Jackrabbit Oak - Runnable jar @@ -213,7 +213,7 @@
                                  -
                                • Last Published: 2015-10-05
                                  • +
                                • Last Published: 2015-10-15
                                • |
                                • Version: 1.4-SNAPSHOT