jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Tomek Rękawek (JIRA) <j...@apache.org>
Subject [jira] [Created] (OAK-7926) ACLs for the mounted principal should use the mounted permission store
Date Thu, 29 Nov 2018 20:26:00 GMT
Tomek Rękawek created OAK-7926:
----------------------------------

             Summary: ACLs for the mounted principal should use the mounted permission store
                 Key: OAK-7926
                 URL: https://issues.apache.org/jira/browse/OAK-7926
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: security
            Reporter: Tomek Rękawek
             Fix For: 1.10


Right now, the permission store is aware of the mounts configured with the {{MountInfoProvider}}:
adding a ACL for the content stored in a mount will result in creating the {{rep:Permissions}}
in {{/jcr:system/rep:permissionStore/oak:mount-MOUNT-WORKSPACE}} permission store. This path
should be mounted as well. This way the content and its permissions can be mounted together.
See OAK-3777 for more details on this.

As in OAK-7725, it's also possible to include a {{rep:AuthorizableFolder}} in a mount. This
way, the users created in such folder will be stored in the mounted repository (when using
Composite Node Store). Permissions for such users should be also stored in the mounted permission
store, rather than general one.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message