Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@jackrabbit.apache.org
Received-SPF: pass (nike.apache.org: domain of ianboston@googlemail.com
 designates 74.125.78.24 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=sender:message-id:from:to:in-reply-to:content-type
         :content-transfer-encoding:mime-version:subject:date:references
         :x-mailer;
        b=RY8LIDgKRf4/zbppicTQRZJyMKUsbjS91RcPimBgejDGsE3RtDpX0rH8CRkITaEmFJ
         Qjd9N0DkpVlEOOHVXN325XENPfslfejelhsLJpOl4CknRJqOvxqOe9/ecYTtZlW90359
         CT9L4F87h+EShJvpfOVWie0HgOhK+ZAqydBzU=
Sender: Ian Boston <ianboston@googlemail.com>
Message-Id: <21C7EC72-E9FE-4F83-A636-BCE0D1B1F1F5@tfd.co.uk>
From: Ian Boston <ieb@tfd.co.uk>
To: users@jackrabbit.apache.org
In-Reply-To: <90a8d1c00908270308p5d46fddsc2b41ff9a705828f@mail.gmail.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v935.3)
Subject: Re: InternalError in UserAccessControlProvider
Date: Thu, 27 Aug 2009 11:15:29 +0100
References: <EC136DA8-A18E-42B5-911C-494122F8236D@tfd.co.uk>
 <90a8d1c00908270308p5d46fddsc2b41ff9a705828f@mail.gmail.com>


On 27 Aug 2009, at 11:08, Stefan Guggisberg wrote:

>> Is it anything to be concerned about ?
>
> without knowing the code in question, i think, yes. the code  
> obviously assumes
> that this situation should never happen. however, if it does, i guess
> it's a bug.

This is Sling with some modifications/enhancements/additions.
Although I have made modifications to other areas of the non-securirty  
access control structure, I dont think I have made any to the  
UserManagerImpl or the UserAccesControlProvider which are direct from  
the 1.5.6 jackrabbit jar.

The test that reproduces this is a Ruby script running outside the  
JVM, single threaded, exercising the Sling http user manager endpoints.

If its a real problem (from your response, I guess it is) I will try  
and reproduce against an unmodified Sling with a simple bash/curl  
script.

Thanks,
Ian