jackrabbit-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Thomas März <thomas.ma...@primedo.com>
Subject Moving of nodes requires read access to the whole tree
Date Thu, 28 Jun 2012 16:08:21 GMT
Before JCR-3291 was fixed, Session#move(String, String) could move nodes
without having read-access to the whole tree.

- Deny jcr:read on /home and grant jcr:all on /home/users/usera to usera
- Move nodes from /home/users/usera/from to /home/users/usera/to with
usera's session
- AccessDeniedException is thrown

Is this by design or an oversight in JCR-3291?

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message