jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Moseley <...@osafoundation.org>
Subject Re: access control on version storage
Date Mon, 04 Apr 2005 20:37:57 GMT
Tobias Strasser wrote:

> all versioning operations that write to the version storage, do not
> make use of the accessmanager (yet). the 'checkPermission' or
> 'isGranted' calls you see are only read accesses for initializing the
> versionable node.
> 
> but you are right, the default accessmanager setup does not contain an
> ItemStateMgr or a SystemSession that you can use to retrieve more
> information about what is to be granted.
> 
> currently, i would use the hierarchymanager to retrieve the path of
> the item to be checked, and allow read-access for anything below
> /jcr:system/jcr:versionStorage. you cannot lookup the respective
> versionable node from within the accessmanager.
> 
> we should probably pass a system session upon initialization of the
> version manager or add it to the AMContext.

thanks for the explanation. i've taken your advice and allowed read 
access for everything below /jcr:system/jcr:versionStorage. i'll be 
happy to see the change you suggest made, tho :)

Mime
View raw message