[
https://issues.apache.org/jira/browse/JCR-2418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
angela resolved JCR-2418.
-------------------------
Resolution: Fixed
Fix Version/s: 2.0-beta4
Assignee: angela
applied patch with minor modification (referring to this issue in the comments
added to ItemManager)
> Read permission on parent node required to access an item's definition
> ----------------------------------------------------------------------
>
> Key: JCR-2418
> URL: https://issues.apache.org/jira/browse/JCR-2418
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Components: jackrabbit-core
> Reporter: angela
> Assignee: angela
> Fix For: 2.0-beta4
>
> Attachments: JCR-2418.patch
>
>
> If a session is granted all permissions on a given item B but lacks
> permission to read it's parent node A an attempt to
> access the definition of B by means of Node.getDefinition or
> Property.getDefinition will fail with AccessDeniedException.
> Similarly, the same session will not be able to modify that item B - e.g. add
> a child node in case it was a node - since implementation e.g. checks of that
> item B isn't protected, which is determined by looking at the definition.
> My feeling is, that the item definition should be accessible even if the
> parent node cannot be read.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
