Hi All!   

I was just playing with the ACL setting in the new rc1 and I found the 
following behaviour:

I took the tomcat-slide bundle as offsett and enabled the JAAS realm. Also I 
mapped slide to the root of the server in the server.xml.

Using the standard users from the default domain.xml and then I change access 
rights on the /files collection:
/roles/user grant /actions/write-acl
/roles/user grant /actions/write-content
/roles/user grant /actions/write-propeties
/roles/user grant /actions/read
/roles/user deny all 

Then I login with john and try to upload a file to the /files collection and i 
get an access denied. The put request returns a 403 write access /actions/write 
denied.

Changing the acl info to:
/roles/user grant /actions/write
/roles/user grant /actions/read
/roles/user deny all 

Now it works fine? Am I misunderstanding something /actions/write and the 
combination of /actions/write-acl, /actions/write-content and 
/actions/write-propeties bee the same?

Thanks
Jacob

Reply via email to