Uploaded image for project: 'ModeShape'
  1. ModeShape
  2. MODE-2225

Custom AuthorizationProvider is not invoked for each child node when iterating through the child nodes of a parent node

    Details

    • Type: Feature Request
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 4.0.0.Alpha3
    • Fix Version/s: 4.0.0.Alpha4
    • Component/s: None
    • Labels:
      None

      Description

      When executing the following code:

      Set<String> nodes = new TreeSet<>();  
      Node parentNode = repositorySession.getNode(parentPath);  
      for (NodeIterator nodeIterator = parentNode.getNodes(); nodeIterator.hasNext(); ) {  
          nodes.add(nodeIterator.nextNode().getPath());  
      }  
      

      a custom AuthorizationProvider is only called once for the parent node, it is not called for each of the child nodes that are retrieve via the iterator. Instead as long as the custom AuthorizationProvider allows the parent node to be read all of the child nodes can also be read without checking that the user has permission to do so.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                hchiorean Horia Chiorean
                Reporter:
                ma6rl Richard Lucas
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: