jackrabbit-oak-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Angela Schreiber <anch...@adobe.com>
Subject Re: Workspace#copy with referenceable nodes
Date Fri, 27 Sep 2013 07:36:06 GMT
hi jukka

yes, you are right... with the user-permissions that would most
probably have undesired results. you convinced me :-)

kind regards
angela

On 9/26/13 3:10 PM, "Jukka Zitting" <jukka.zitting@gmail.com> wrote:

>Hi,
>
>On Thu, Sep 26, 2013 at 8:59 AM, Angela Schreiber <anchela@adobe.com>
>wrote:
>> however, if the access rights were part of the copied tree a
>> full copy would IMO result in the same access rights.
>
>It would, but the user could in most cases still gain full read
>access. Since per-user ACLs even higher up the tree take precedence
>over per-group ones, copying a tree to somewhere where I explicitly
>have been granted full read access will grant me read access to all
>parts where read access is by default denied for everyone.
>
>> in addition i wonder what happens if the original source tree
>> contains intermediate nodes that were not accessible but
>> the subtrees were again... wouldn't that qualify as well as
>> being part of the subtree of the source that needs to be copied?
>> we would not get these copied with the current approach.
>
>I think it's fine that such subtrees are not included in a copy as
>there's no clean way for the repository to figure out what should be
>used instead for the intermediate nodes.
>
>BR,
>
>Jukka Zitting


Mime
View raw message