Uploaded image for project: 'ModeShape'
  1. ModeShape
  2. MODE-2016

AccessControlManagerImpl the default JcrAccessControlList is called with path instead of username

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Blocker
    • Resolution: Done
    • Affects Version/s: 3.4.0.Final
    • Fix Version/s: 3.5.0.Final
    • Component/s: Security
    • Labels:
      None

      Description

      I was debugging my AuthorizationProvider implementation and discovered this tiny mismatch in the AccessControlManagerImpl source code, line 117. The call to the default ACL is made passing the path string, instead of the username. It doesn't have impact presently, given the default ACL only has privileges for "everyone". It might have impact if the default ACL was configured somehow differently.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                oleg.kulikov Oleg Kulikov
                Reporter:
                gregjan Gregory Jansen
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: