Uploaded image for project: 'ModeShape'
  1. ModeShape
  2. MODE-2016

AccessControlManagerImpl the default JcrAccessControlList is called with path instead of username

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 3.5.0.Final
    • 3.4.0.Final
    • Security
    • None

    Description

      I was debugging my AuthorizationProvider implementation and discovered this tiny mismatch in the AccessControlManagerImpl source code, line 117. The call to the default ACL is made passing the path string, instead of the username. It doesn't have impact presently, given the default ACL only has privileges for "everyone". It might have impact if the default ACL was configured somehow differently.

      Attachments

        Activity

          People

            oleg.kulikov Oleg Kulikov (Inactive)
            gregjan_jira Gregory Jansen (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: