Details

      Description

      In the current version, there is noting that prevent us to us a JCR session after a session.logout, so the following code is allowed:

      1 Node node = (Node)session.getItem(nodePath) ;
      2 session.logout();
      3 node.getProperty(propertyName);

      At line #3 we expect a RepositoryException which is not the current case. Once the session has been logout, it should possible to access to Session/Item info but it should not be possible to access to data and even more important to modify some data.

      To fix this issue, we could add:
      if (!session.isLive())

      { throw new RepositoryException("corresponding session has been closed"); }

      to ItemImpl.checkValid() and also create a method checkValid to SessionImpl with the code above as implementation and call checkValid in all the method that access or modify the data

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  nzamosenchuk Nikolazy Zamosenchuk
                  Reporter:
                  nfilotto Nicolas Filotto
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - 2 days Original Estimate - 2 days
                    2d
                    Remaining:
                    Remaining Estimate - 0 minutes
                    0m
                    Logged:
                    Time Spent - 3 days
                    3d