jackrabbit-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Thomas März <thomas.ma...@primedo.com>
Subject Re: Moving of nodes requires read access to the whole tree
Date Thu, 28 Jun 2012 16:31:39 GMT
Created https://issues.apache.org/jira/browse/JCR-3364

On Thu, Jun 28, 2012 at 6:22 PM, Angela Schreiber <anchela@adobe.com> wrote:

> imo that is a bug
>
> kind regards
> angela
>
>
> On 6/28/12 6:08 PM, Thomas März wrote:
>
>> Before JCR-3291 was fixed, Session#move(String, String) could move nodes
>> without having read-access to the whole tree.
>>
>> - Deny jcr:read on /home and grant jcr:all on /home/users/usera to usera
>> - Move nodes from /home/users/usera/from to /home/users/usera/to with
>> usera's session
>> - AccessDeniedException is thrown
>>
>> Is this by design or an oversight in JCR-3291?
>>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message