From users-return-18054-apmail-jackrabbit-users-archive=jackrabbit.apache.org@jackrabbit.apache.org Tue Sep 13 18:24:36 2011 Return-Path: X-Original-To: apmail-jackrabbit-users-archive@minotaur.apache.org Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C8824846A for ; Tue, 13 Sep 2011 18:24:36 +0000 (UTC) Received: (qmail 38379 invoked by uid 500); 13 Sep 2011 18:24:36 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 37966 invoked by uid 500); 13 Sep 2011 18:24:33 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 37513 invoked by uid 99); 13 Sep 2011 18:24:28 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2011 18:24:28 +0000 X-ASF-Spam-Status: No, hits=-1.0 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS,URI_HEX X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of aklimets@adobe.com designates 64.18.1.208 as permitted sender) Received: from [64.18.1.208] (HELO exprod6og107.obsmtp.com) (64.18.1.208) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2011 18:24:22 +0000 Received: from outbound-smtp-2.corp.adobe.com ([193.104.215.16]) by exprod6ob107.postini.com ([64.18.5.12]) with SMTP ID DSNKTm+fwNbGs4GQpCg0VTCg/Q4E7/1o3XIn@postini.com; Tue, 13 Sep 2011 11:24:01 PDT Received: from inner-relay-1.corp.adobe.com (inner-relay-1.adobe.com [153.32.1.51]) by outbound-smtp-2.corp.adobe.com (8.12.10/8.12.10) with ESMTP id p8DINwIe004215 for ; Tue, 13 Sep 2011 11:23:59 -0700 (PDT) Received: from nacas01.corp.adobe.com (nacas01.corp.adobe.com [10.8.189.99]) by inner-relay-1.corp.adobe.com (8.12.10/8.12.10) with ESMTP id p8DINvkC009482 for ; Tue, 13 Sep 2011 11:23:57 -0700 (PDT) Received: from eurhub01.eur.adobe.com (10.128.4.30) by nacas01.corp.adobe.com (10.8.189.99) with Microsoft SMTP Server (TLS) id 8.3.192.1; Tue, 13 Sep 2011 11:23:57 -0700 Received: from eurmbx01.eur.adobe.com ([10.128.4.32]) by eurhub01.eur.adobe.com ([10.128.4.30]) with mapi; Tue, 13 Sep 2011 19:23:56 +0100 From: Alexander Klimetschek To: "users@jackrabbit.apache.org" Date: Tue, 13 Sep 2011 19:23:52 +0100 Subject: Re: Setting up Access Control Thread-Topic: Setting up Access Control Thread-Index: AcxyQkwX1j6AUIakR5SOTgZG0ILmvA== Message-ID: In-Reply-To: <1315928345194-3810401.post@n4.nabble.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.12.0.110505 acceptlanguage: de-DE, en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 See also http://wiki.apache.org/jackrabbit/AccessControl Cheers, Alex On 13.09.11 17:39, "maikhorma" wrote: > >Francisco Carriedo Scher wrote: >>=20 >> Ok, >>=20 >> thanks in advance for answering. I found DefaultAccessManager class, >>which >> extends AbstractAccessControlManager (and has setPolicy method >> implemented). >> After it i set such class in repository.xml file to use it as my access >> manager and, leaving commented the access.xml file (with no file), i can >> not >> perform operations on the repository (logged in as admin), as i obtain >>the >> following exceptions: >>=20 >> javax.jcr.PathNotFoundException: /myfolder (trying to access a node to >> create a child node) >> javax.jcr.AccessDeniedException: cannot read item >> cafebabe-cafe-babe-cafe-babecafebabe (trying to create a user) >> ... >>=20 >> So i think that access.xml line must be uncommented >>(DefaultAccessManager >> can not be instantiated since such file does not exist) and populated >>with >> access control data, isn't it? I did not find access.xml info so far, >>any >> useful pointer? >>=20 >> Thanks for your attention! >>=20 > >Can you back up a second and describe what you are actually trying to do? >It kind of sounds like you're just trying to apply normal permissions to a >node, but if that's so, it seems you are making it very complicated. As >Justin said you shouldn't need to implement classes or configure the >repository xml to set permissions. You should use the JCR Api [1] and >jackrabbit provides all the implementations for you. You log in, and then >call session.getAccessControlManager(). If you are trying to do something >more complicated, you'll have to be more specific. > >[1] http://www.day.com/specs/jcr/2.0/16_Access_Control_Management.html > >-- >View this message in context: >http://jackrabbit.510166.n4.nabble.com/Setting-up-Access-Control-tp3809801 >p3810401.html >Sent from the Jackrabbit - Users mailing list archive at Nabble.com. > --=20 Alexander Klimetschek Developer // Adobe (Day) // Berlin - Basel