From dev-return-31253-apmail-jackrabbit-dev-archive=jackrabbit.apache.org@jackrabbit.apache.org Thu Apr 14 07:43:48 2011 Return-Path: Delivered-To: apmail-jackrabbit-dev-archive@www.apache.org Received: (qmail 98396 invoked from network); 14 Apr 2011 07:43:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 14 Apr 2011 07:43:48 -0000 Received: (qmail 11575 invoked by uid 500); 14 Apr 2011 07:43:47 -0000 Delivered-To: apmail-jackrabbit-dev-archive@jackrabbit.apache.org Received: (qmail 11541 invoked by uid 500); 14 Apr 2011 07:43:47 -0000 Mailing-List: contact dev-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@jackrabbit.apache.org Delivered-To: mailing list dev@jackrabbit.apache.org Received: (qmail 11533 invoked by uid 99); 14 Apr 2011 07:43:44 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 14 Apr 2011 07:43:44 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 14 Apr 2011 07:43:43 +0000 Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116]) by hel.zones.apache.org (Postfix) with ESMTP id D8E87A1103 for ; Thu, 14 Apr 2011 07:43:05 +0000 (UTC) Date: Thu, 14 Apr 2011 07:43:05 +0000 (UTC) From: "Tobias Bocanegra (JIRA)" To: dev@jackrabbit.apache.org Message-ID: <1086751407.57143.1302766985870.JavaMail.tomcat@hel.zones.apache.org> In-Reply-To: <1546327264.45859.1302311166355.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Reopened] (JCR-2937) ACL with glob restrictions does not work on '/' MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/JCR-2937?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tobias Bocanegra reopened JCR-2937: ----------------------------------- from JCR-2700: > an empty string restriction forces the ACE to take effect on the node it has been applied. which means in this case, effect on '/'. but if i want to restrict the subnodes of '/' i can't express this. but i can for all other nodes than '/'. eg: using '/*' works but on '/' which is not intuitive. > ACL with glob restrictions does not work on '/' > ----------------------------------------------- > > Key: JCR-2937 > URL: https://issues.apache.org/jira/browse/JCR-2937 > Project: Jackrabbit Content Repository > Issue Type: Bug > Components: security > Affects Versions: 2.3.0 > Reporter: Tobias Bocanegra > > i tried to define a ACL on '/' that would allow 'read' on '/' itself, but not for the nodes underneath. i tried "*", "/*", "./*" but none of them seem to do the desired effect. > eg: > everyone,allow,jcr:read, '/' > everyone,deny,jcr:read, '/', glob="/*" > the same works for a non-root node. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira