Return-Path: Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: (qmail 46463 invoked from network); 17 Mar 2010 13:34:41 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 17 Mar 2010 13:34:41 -0000 Received: (qmail 17284 invoked by uid 500); 17 Mar 2010 13:34:41 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 17236 invoked by uid 500); 17 Mar 2010 13:34:41 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 17217 invoked by uid 99); 17 Mar 2010 13:34:40 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 17 Mar 2010 13:34:40 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of anchela@day.com designates 207.126.148.85 as permitted sender) Received: from [207.126.148.85] (HELO psmtp.com) (207.126.148.85) by apache.org (qpsmtpd/0.29) with SMTP; Wed, 17 Mar 2010 13:34:31 +0000 Received: from source ([209.85.220.216]) by eu3sys201aob102.postini.com ([207.126.154.11]) with SMTP ID DSNKS6DaUkrUxuys0KYELzGD6UIhn2sqIt4s@postini.com; Wed, 17 Mar 2010 13:34:11 UTC Received: by fxm8 with SMTP id 8so206311fxm.5 for ; Wed, 17 Mar 2010 06:34:10 -0700 (PDT) Received: by 10.87.45.20 with SMTP id x20mr12193321fgj.63.1268832850000; Wed, 17 Mar 2010 06:34:10 -0700 (PDT) Received: from bslm-106.corp.day.com (bsl-rtr.day.com [62.192.10.254]) by mx.google.com with ESMTPS id f31sm10819984fkf.18.2010.03.17.06.34.08 (version=TLSv1/SSLv3 cipher=RC4-MD5); Wed, 17 Mar 2010 06:34:09 -0700 (PDT) Message-ID: <4BA0DA4F.5090801@day.com> Date: Wed, 17 Mar 2010 14:34:07 +0100 From: Angela Schreiber User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: users@jackrabbit.apache.org Subject: Re: Multiple ACE nodes, same principal, different properties. References: <48C40287-ED04-4616-AAAC-F4452102B3C4@tfd.co.uk> In-Reply-To: <48C40287-ED04-4616-AAAC-F4452102B3C4@tfd.co.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org hi ian > In standard Jackrabbit 2, is it possible to add more than one ACE to an ACL with the same principal ? it depends on the acl implementation. the principal-based acl just collects all entries while resource-based acl currently makes a cleanup and keeps at most one allow and one deny asserting there are no contradicting allow/deny privileges for the same principal. regards angela