jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "angela (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (JCR-3577) Allow creation of users with 'null' password
Date Mon, 22 Apr 2013 09:39:16 GMT

    [ https://issues.apache.org/jira/browse/JCR-3577?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13637874#comment-13637874
] 

angela commented on JCR-3577:
-----------------------------

regarding the patch:

- there is no need to catch the exception in a test and then call "fail()"... the try/catch
block should be removed. the test will then fail if an exception is raised.
- for compatibility with oak the setPassword method should throw an exception if the node
is NEW and the pw is null... including a test (see list above).

can you provide an updated patch? thanks.
                
> Allow creation of users with 'null' password
> --------------------------------------------
>
>                 Key: JCR-3577
>                 URL: https://issues.apache.org/jira/browse/JCR-3577
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core, security
>    Affects Versions: 2.6
>            Reporter: Lars Krapf
>            Priority: Trivial
>         Attachments: jr2_null_password_patch.txt
>
>
> In order to create of system-only users that can be impersonated but cannot actually
login, 
> the creation of users with 'null' passwords should be allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message