jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "angela (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (JCR-3577) Allow creation of users with 'null' password
Date Mon, 22 Apr 2013 09:39:16 GMT

    [ https://issues.apache.org/jira/browse/JCR-3577?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13637874#comment-13637874

angela commented on JCR-3577:

regarding the patch:

- there is no need to catch the exception in a test and then call "fail()"... the try/catch
block should be removed. the test will then fail if an exception is raised.
- for compatibility with oak the setPassword method should throw an exception if the node
is NEW and the pw is null... including a test (see list above).

can you provide an updated patch? thanks.
> Allow creation of users with 'null' password
> --------------------------------------------
>                 Key: JCR-3577
>                 URL: https://issues.apache.org/jira/browse/JCR-3577
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core, security
>    Affects Versions: 2.6
>            Reporter: Lars Krapf
>            Priority: Trivial
>         Attachments: jr2_null_password_patch.txt
> In order to create of system-only users that can be impersonated but cannot actually
> the creation of users with 'null' passwords should be allowed.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

View raw message