Return-Path: Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: (qmail 36333 invoked from network); 27 Jul 2010 19:37:56 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 27 Jul 2010 19:37:56 -0000 Received: (qmail 46106 invoked by uid 500); 27 Jul 2010 19:37:55 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 46067 invoked by uid 500); 27 Jul 2010 19:37:54 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 46058 invoked by uid 99); 27 Jul 2010 19:37:54 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 27 Jul 2010 19:37:54 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of aklimets@day.com designates 207.126.148.91 as permitted sender) Received: from [207.126.148.91] (HELO eu3sys201amo010.postini.com) (207.126.148.91) by apache.org (qpsmtpd/0.29) with SMTP; Tue, 27 Jul 2010 19:37:48 +0000 Received: from source ([74.125.82.182]) by eu3sys201aob104.postini.com ([207.126.154.11]) with SMTP ID DSNKTE81ddRZnDAA1ZJwJg3e26ws0K9DL0+m@postini.com; Tue, 27 Jul 2010 19:37:27 UTC Received: by wyj26 with SMTP id 26so4575720wyj.27 for ; Tue, 27 Jul 2010 12:37:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.227.137.193 with SMTP id x1mr7586183wbt.80.1280259444517; Tue, 27 Jul 2010 12:37:24 -0700 (PDT) Received: by 10.227.131.21 with HTTP; Tue, 27 Jul 2010 12:37:24 -0700 (PDT) In-Reply-To: References: Date: Tue, 27 Jul 2010 21:37:24 +0200 Message-ID: Subject: Re: Access control example From: Alexander Klimetschek To: users@jackrabbit.apache.org Content-Type: text/plain; charset=ISO-8859-1 I am currently working on a wiki page for that: http://wiki.apache.org/jackrabbit/AccessControl Expect more in the coming days. Regards, Alex On Tue, Jul 27, 2010 at 15:51, Joel Feenstra wrote: > Hi, > I'm working on adding some authentication/authorization to our application > which uses Jackrabbit 2.1. How can I best control access to a node (and it's > children) so that one user has read/write access to the subtree, but all > other users don't have any access (not even read access). > > I've looked at using the principal based ACLProvider, but I can't find any > examples detailing how to actually use it. > > Thanks, > Joel > jrfeenst@gmail.com > -- Alexander Klimetschek alexander.klimetschek@day.com