Return-Path: 
 <dev-return-26235-apmail-jackrabbit-dev-archive=jackrabbit.apache.org@jackrabbit.apache.org>
Delivered-To: apmail-jackrabbit-dev-archive@www.apache.org
Received: (qmail 31042 invoked from network); 24 Nov 2009 09:57:03 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 24 Nov 2009 09:57:03 -0000
Received: (qmail 77355 invoked by uid 500); 24 Nov 2009 09:57:03 -0000
Delivered-To: apmail-jackrabbit-dev-archive@jackrabbit.apache.org
Received: (qmail 77267 invoked by uid 500); 24 Nov 2009 09:57:02 -0000
Mailing-List: contact dev-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@jackrabbit.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@jackrabbit.apache.org>
List-Post: <mailto:dev@jackrabbit.apache.org>
List-Id: <dev.jackrabbit.apache.org>
Reply-To: dev@jackrabbit.apache.org
Delivered-To: mailing list dev@jackrabbit.apache.org
Received: (qmail 77259 invoked by uid 99); 24 Nov 2009 09:57:02 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 24 Nov 2009 09:57:02 +0000
X-ASF-Spam-Status: No, hits=-10.5 required=5.0
	tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 24 Nov 2009 09:56:59 +0000
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id BE046234C1F2
	for <dev@jackrabbit.apache.org>; Tue, 24 Nov 2009 01:56:39 -0800 (PST)
Message-ID: <277809305.1259056599777.JavaMail.jira@brutus>
Date: Tue, 24 Nov 2009 09:56:39 +0000 (UTC)
From: "angela (JIRA)" <jira@apache.org>
To: dev@jackrabbit.apache.org
Subject: [jira] Commented: (JCR-2399) Enable protected security importers by
 default
In-Reply-To: <865973316.1258722699963.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/JCR-2399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12781844#action_12781844 ] 

angela commented on JCR-2399:
-----------------------------

> but why not making our life easier?

I'm not convinced that this change would make our life any easier. this import extensions is just one piece
from a whole bunch of additional configuration and functionality extensions we need at Day in order to work 
around self made problems... and I don't think we should discuss those in the public, shouldn't we?

> btw: whatever the default is, an import should not leave the transient space in a weird state, like the 
> missing jcr:principalName properties after a user import.

that's the consequence of the compromise I agreed on, although I already wished several time I hadn't. the user nodes were protected in the past for good reasons and there was no wired state whatsoever if I hadn't agreed to relax that restriction for Day specific needs. 

> Enable protected security importers by default
> ----------------------------------------------
>
>                 Key: JCR-2399
>                 URL: https://issues.apache.org/jira/browse/JCR-2399
>             Project: Jackrabbit Content Repository
>          Issue Type: Wish
>          Components: jackrabbit-core
>    Affects Versions: 2.0-beta1
>            Reporter: Tobias Bocanegra
>         Attachments: default_importers.r882540.patch
>
>
> We added those cool protected property and node importers for enabling sysview import of users,groupd and acls. unfortunately, they are only
> enabled when the respective config is set:
> <Import>
>   <ProtectedNodeImporter class="org.apache.jackrabbit.core.xml.AccessControlImporter"/>
>   <ProtectedPropertyImporter class="org.apache.jackrabbit.core.security.user.UserImporter">
>     <param name="importBehavior" value="besteffort"/>
>   </ProtectedPropertyImporter>
> </Import>
> i think we should enable them by default, i.e. for an empty config. if someone wants to disable them, they can still reference the default importers:
> <Import>
>   <ProtectedNodeImporter class="org.apache.jackrabbit.core.xml.DefaultProtectedNodeImporter"/>
>   <ProtectedPropertyImporter class="org.apache.jackrabbit.core.xml.DefaultProtectedPropertyImporter" />
> </Import>

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.