jackrabbit-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Angela Schreiber <anch...@adobe.com>
Subject Re: Moving of nodes requires read access to the whole tree
Date Thu, 28 Jun 2012 16:22:28 GMT
imo that is a bug

kind regards
angela

On 6/28/12 6:08 PM, Thomas März wrote:
> Before JCR-3291 was fixed, Session#move(String, String) could move nodes
> without having read-access to the whole tree.
>
> - Deny jcr:read on /home and grant jcr:all on /home/users/usera to usera
> - Move nodes from /home/users/usera/from to /home/users/usera/to with
> usera's session
> - AccessDeniedException is thrown
>
> Is this by design or an oversight in JCR-3291?

Mime
View raw message