jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "angela (JIRA)" <j...@apache.org>
Subject [jira] [Created] (OAK-7982) ACL.addEntry: check for mandatory restrictions only respects single value restrictions
Date Thu, 10 Jan 2019 15:39:00 GMT
angela created OAK-7982:
---------------------------

             Summary: ACL.addEntry: check for mandatory restrictions only respects single
value restrictions
                 Key: OAK-7982
                 URL: https://issues.apache.org/jira/browse/OAK-7982
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: core, security
            Reporter: angela
            Assignee: angela


The validation of {{ACL.addEntry(Principal principal, Privilege[] privileges, boolean isAllow,
Map<String, Value> restrictions, Map<String, Value[]> mvRestrictions)}}
includes a check that mandatory restrictions are actually present.

However, the code performing that check only tests if the mandatory restrictions are included
in the {{restrictions}} ignoring the fact that a mandatory restriction might be multi-valued
and thus provided in the {{mvRestrictions}} param.

cc: [~stillalex] fyi.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message