Return-Path: Delivered-To: apmail-jackrabbit-users-archive@locus.apache.org Received: (qmail 79154 invoked from network); 15 Jun 2007 13:45:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 15 Jun 2007 13:45:13 -0000 Received: (qmail 21422 invoked by uid 500); 15 Jun 2007 13:45:15 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 21403 invoked by uid 500); 15 Jun 2007 13:45:14 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 21394 invoked by uid 99); 15 Jun 2007 13:45:14 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 15 Jun 2007 06:45:14 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of gcaju-users@m.gmane.org designates 80.91.229.2 as permitted sender) Received: from [80.91.229.2] (HELO ciao.gmane.org) (80.91.229.2) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 15 Jun 2007 06:45:00 -0700 Received: from list by ciao.gmane.org with local (Exim 4.43) id 1HzC3p-0000do-7b for users@jackrabbit.apache.org; Fri, 15 Jun 2007 15:41:57 +0200 Received: from dslb-082-083-112-153.pools.arcor-ip.net ([82.83.112.153]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 15 Jun 2007 15:41:57 +0200 Received: from ck by dslb-082-083-112-153.pools.arcor-ip.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 15 Jun 2007 15:41:57 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: users@jackrabbit.apache.org From: Christoph Kiehl Subject: Re: Quick question about permissions Date: Fri, 15 Jun 2007 15:38:16 +0200 Lines: 17 Message-ID: References: <1181913152.7965.7.camel@antares> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: dslb-082-083-112-153.pools.arcor-ip.net User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) In-Reply-To: <1181913152.7965.7.camel@antares> Sender: news X-Virus-Checked: Checked by ClamAV on apache.org Paco Avila wrote: > I've implemented my own access manager to protect some documents and folders > (the application is an Document Management System -> OpenKM). Look at this folder hierarchy: > > root -> folder1 -> folder2 -> testDocument > > If I protect 'folder2' (user can't read) when I search the 'testDocument' is included > in the search results, why? AFAIK the result iterator in Jackrabbit calls isGranted() on your access manager just for "testDocument". This means if you want to inherit the permissions for "testDocument" from "folder2" you need to implement that in your isGranted() method. Jackrabbit does not automatically inherit permissions. Cheers, Christoph