Return-Path: X-Original-To: apmail-jackrabbit-users-archive@minotaur.apache.org Delivered-To: apmail-jackrabbit-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id A8E80D894 for ; Thu, 28 Jun 2012 16:32:30 +0000 (UTC) Received: (qmail 54950 invoked by uid 500); 28 Jun 2012 16:32:30 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 54919 invoked by uid 500); 28 Jun 2012 16:32:30 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 54911 invoked by uid 99); 28 Jun 2012 16:32:30 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 28 Jun 2012 16:32:30 +0000 X-ASF-Spam-Status: No, hits=3.2 required=5.0 tests=FRT_ADOBE2,HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [85.13.132.85] (HELO dd7926.kasserver.com) (85.13.132.85) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 28 Jun 2012 16:32:21 +0000 Received: from mail-lb0-f170.google.com (mail-lb0-f170.google.com [209.85.217.170]) by dd7926.kasserver.com (Postfix) with ESMTPSA id 94167260208 for ; Thu, 28 Jun 2012 18:32:00 +0200 (CEST) Received: by lbgc1 with SMTP id c1so7330627lbg.1 for ; Thu, 28 Jun 2012 09:32:00 -0700 (PDT) Received: by 10.112.102.136 with SMTP id fo8mr1446191lbb.106.1340901120076; Thu, 28 Jun 2012 09:32:00 -0700 (PDT) MIME-Version: 1.0 Received: by 10.114.11.65 with HTTP; Thu, 28 Jun 2012 09:31:39 -0700 (PDT) In-Reply-To: <4FEC84C4.7090808@adobe.com> References: <4FEC84C4.7090808@adobe.com> From: =?UTF-8?B?VGhvbWFzIE3DpHJ6?= Date: Thu, 28 Jun 2012 18:31:39 +0200 Message-ID: Subject: Re: Moving of nodes requires read access to the whole tree To: users@jackrabbit.apache.org Content-Type: multipart/alternative; boundary=f46d0401fa33f0ebfa04c38ade9b --f46d0401fa33f0ebfa04c38ade9b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Created https://issues.apache.org/jira/browse/JCR-3364 On Thu, Jun 28, 2012 at 6:22 PM, Angela Schreiber wrote= : > imo that is a bug > > kind regards > angela > > > On 6/28/12 6:08 PM, Thomas M=C3=A4rz wrote: > >> Before JCR-3291 was fixed, Session#move(String, String) could move nodes >> without having read-access to the whole tree. >> >> - Deny jcr:read on /home and grant jcr:all on /home/users/usera to usera >> - Move nodes from /home/users/usera/from to /home/users/usera/to with >> usera's session >> - AccessDeniedException is thrown >> >> Is this by design or an oversight in JCR-3291? >> > --f46d0401fa33f0ebfa04c38ade9b--