Jackrabbit Oak – Permissions : The Default Implementation

Representation in the Repository

Modified: jackrabbit/site/live/oak/docs/security/permission/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/differences.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/permission/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/permission/differences.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Permissions : Differences wrt Jackrabbit 2.x @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/permission/evaluation.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/evaluation.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/permission/evaluation.html (original) +++ jackrabbit/site/live/oak/docs/security/permission/evaluation.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Permission Evaluation in Detail @@ -131,7 +131,7 @@

Added: jackrabbit/site/live/oak/docs/security/permission/multiplexing.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/multiplexing.html?rev=1804502&view=auto ============================================================================== --- jackrabbit/site/live/oak/docs/security/permission/multiplexing.html (added) +++ jackrabbit/site/live/oak/docs/security/permission/multiplexing.html Wed Aug 9 10:10:21 2017 @@ -0,0 +1,287 @@ + + + + + + + + + Jackrabbit Oak – Multiplexing support in the PermissionStore + + + + + + + +

+ + +

+ +

Multiplexing support in the PermissionStore

General Notes

Multiplexing support is implemented as a composite PermissionProvider made of the default workspace provider and the existing mounts. This is available since Oak 1.7.3 OAK-3777.

PermissionStore Evaluation (reading)

Given the following mount setup

+ +

private
+    - /libs
+    - /apps
+default
+    - /
+

In above setup nodes under /apps and /libs (include apps and libs) are part of “private” mount (mount name is “private”) and all other paths are part of default mount. A dedicated PermissionStore will be created under oak:mount-private-default that contains information relevant to this specific mount.

+ +

/jcr:system/rep:permissionStore
+    + oak:mount-private-default
+        + editor //principal name
+            + 1345610890 (rep:PermissionStore) //path hash
+                - rep:accessControlledPath = /libs
+                    + 0
+                      - rep:isAllow = false
+                      - rep:privileges = [1279]
+    + default  //workspace name
+        + editor //principal name
+            + 1227964008 (rep:PermissionStore) //path hash
+                - rep:accessControlledPath = /content
+                    + 0
+                      - rep:isAllow = true
+                      - rep:privileges = [1279]
+

PermissionStore updates (writing)

The PermissionHook is now mount-aware and will delegate changes to specific path to their designated components based on path.

+ + + \ No newline at end of file Propchange: jackrabbit/site/live/oak/docs/security/permission/multiplexing.html ------------------------------------------------------------------------------ svn:eol-style = native Modified: jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html (original) +++ jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Permissions vs Privileges @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/principal.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal.html (original) +++ jackrabbit/site/live/oak/docs/security/principal.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Principal Management @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/principal/cache.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/cache.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/cache.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/cache.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Caching Results of Principal Resolution @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/principal/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/differences.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/differences.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Principal Management : Differences wrt Jackrabbit 2.x @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/principal/principalprovider.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/principalprovider.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/principal/principalprovider.html (original) +++ jackrabbit/site/live/oak/docs/security/principal/principalprovider.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Implementations of the PrincipalProvider Interface @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/privilege.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Privilege Management @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/privilege/default.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/default.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/default.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/default.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Privilege Management : The Default Implementation @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/privilege/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/differences.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/differences.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Privilege Management : Differences wrt Jackrabbit 2.x @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Privilege Management : Mapping Privileges to Items @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html (original) +++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Privilege Management : Mapping API Calls to Privileges @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user.html (original) +++ jackrabbit/site/live/oak/docs/security/user.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – User Management @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/authorizableaction.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizableaction.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/authorizableaction.html (original) +++ jackrabbit/site/live/oak/docs/security/user/authorizableaction.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Authorizable Actions @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html (original) +++ jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Authorizable Node Name Generation @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/default.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/default.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/default.html (original) +++ jackrabbit/site/live/oak/docs/security/user/default.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – User Management : The Default Implementation @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/differences.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/differences.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/differences.html (original) +++ jackrabbit/site/live/oak/docs/security/user/differences.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – User Management : Differences to Jackrabbit 2.x @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/expiry.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/expiry.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/expiry.html (original) +++ jackrabbit/site/live/oak/docs/security/user/expiry.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Password Expiry and Force Initial Password Change @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/groupaction.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/groupaction.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/groupaction.html (original) +++ jackrabbit/site/live/oak/docs/security/user/groupaction.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Group Actions @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/history.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/history.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/history.html (original) +++ jackrabbit/site/live/oak/docs/security/user/history.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Password History @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/membership.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/membership.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/membership.html (original) +++ jackrabbit/site/live/oak/docs/security/user/membership.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Group Membership @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/security/user/query.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/query.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/security/user/query.html (original) +++ jackrabbit/site/live/oak/docs/security/user/query.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Searching Users and Groups @@ -131,7 +131,7 @@

Modified: jackrabbit/site/live/oak/docs/use_getting_started.html URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/use_getting_started.html?rev=1804502&r1=1804501&r2=1804502&view=diff ============================================================================== --- jackrabbit/site/live/oak/docs/use_getting_started.html (original) +++ jackrabbit/site/live/oak/docs/use_getting_started.html Wed Aug 9 10:10:21 2017 @@ -1,13 +1,13 @@ - + Jackrabbit Oak – Runnable jar @@ -131,7 +131,7 @@

Permission Evaluation in Multiplexed Stores

Representation in the Repository

Oak Documentation

Multiplexing support in the PermissionStore

General Notes

PermissionStore Evaluation (reading)

PermissionStore updates (writing)