jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "angela (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (OAK-7323) Log when trying to add "everyone" as member to other groups or add user/groups to "everyone"
Date Tue, 13 Nov 2018 09:24:00 GMT

     [ https://issues.apache.org/jira/browse/OAK-7323?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

angela reassigned OAK-7323:
---------------------------

    Assignee: angela

> Log when trying to add  "everyone" as member to other groups or add user/groups to "everyone"
> ---------------------------------------------------------------------------------------------
>
>                 Key: OAK-7323
>                 URL: https://issues.apache.org/jira/browse/OAK-7323
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: core, security
>    Affects Versions: 1.6.10
>            Reporter: Konrad Windszus
>            Assignee: angela
>            Priority: Trivial
>             Fix For: 1.10
>
>
> Currently it is not allowed to extend the group {{everyone}} by putting it as member
to another group. The other way is prevented as well (i.e. putting some group or user as member
of the {{everyone}} group) as every other principal is by default member of {{everyone}}.
Extending the {{everyone}} group would therefore lead to cycles. Although this is correctly
prevented in the code (https://github.com/apache/jackrabbit/blob/adb1e79ae26aba5d068be56e5e9eb562344e5bb9/jackrabbit-core/src/main/java/org/apache/jackrabbit/core/security/user/GroupImpl.java#L156)
this is not noticed by the called. 
> I would instead suggest to fail more loudly by throwing an exception or at least log
a warning.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message