Mailing-List: contact oak-dev-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: oak-dev@jackrabbit.apache.org
Received-SPF: pass (nike.apache.org: domain of mueller@adobe.com designates
 64.18.1.242 as permitted sender)
From: Thomas Mueller <mueller@adobe.com>
To: "oak-dev@jackrabbit.apache.org" <oak-dev@jackrabbit.apache.org>
Date: Thu, 24 Jan 2013 13:34:40 +0000
Subject: Re: Accessing ACLs (Was: [jira] [Created] (OAK-581) IndexDefinition
 for Access Control Content)
Thread-Topic: Accessing ACLs (Was: [jira] [Created] (OAK-581)
 IndexDefinition for Access Control Content)
Thread-Index: Ac36N5Hwhmjtsd18SXK1hyKmP99Oxg==
Message-ID: <CD26F5DB.3A7BD%mueller@adobe.com>
In-Reply-To: <510136CD.9090903@adobe.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.2.5.121010
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Hi,

Ah OK. Then the only solution to avoid those indexes is to not support the
feature I guess.

Regards,
Thomas


On 1/24/13 2:27 PM, "Angela Schreiber" <anchela@adobe.com> wrote:

>hi jukka
>
>it's not for the access control evaluation nor for access
>by path that the query is used... is for the jackrabbit api
>extensions that retrieve access control content by principal.
>
>you don't want a repository traversal there... trust me ;-)
>
>angela
>
>On 1/24/13 2:22 PM, Jukka Zitting wrote:
>> Hi,
>>
>> On Thu, Jan 24, 2013 at 10:11 AM, angela (JIRA)<jira@apache.org>  wrote:
>>> since query is used to retrieve to used retrieve ac content by
>>> principal, the ac impl should define an property index for the
>>> rep:principalName defined by rep:ACE node type.
>>
>> Is it essential for the access control code to use query? I would
>> assume that it would be both easier (i.e. less code) and more
>> efficient to simply read the relevant ACLs directly from the content
>> tree being accessed.
>>
>> BR,
>>
>> Jukka Zitting