This is an automated email from the ASF dual-hosted git repository.

olli pushed a commit to branch master
in repository 
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-karaf-configs.git

commit 2a6008ee8c77f5e663dec26c474b98d5b0bd37cf
Author: Oliver Lietz <[email protected]>
AuthorDate: Thu Dec 3 11:15:52 2020 +0100

    add configs for usermanager and adjust whitelist
---
 ...g.jcr.base.internal.LoginAdminWhitelist.fragment~sling_jcr.config | 1 -
 ...nit.RepositoryInitializer~sling_jcr_jackrabbit_usermanager.config | 3 +++
 ...iceUserMapperImpl.amended~sling_jcr_jackrabbit_usermanager.config | 3 +++
 src/main/resources/sling-jcr-jackrabbit-usermanager.txt              | 5 +++++
 4 files changed, 11 insertions(+), 1 deletion(-)

diff --git 
a/src/main/resources/org.apache.sling.jcr.base.internal.LoginAdminWhitelist.fragment~sling_jcr.config
 
b/src/main/resources/org.apache.sling.jcr.base.internal.LoginAdminWhitelist.fragment~sling_jcr.config
index a2f0ae2..8636855 100644
--- 
a/src/main/resources/org.apache.sling.jcr.base.internal.LoginAdminWhitelist.fragment~sling_jcr.config
+++ 
b/src/main/resources/org.apache.sling.jcr.base.internal.LoginAdminWhitelist.fragment~sling_jcr.config
@@ -2,7 +2,6 @@ whitelist.name="sling-jcr"
 whitelist.bundles=[\
   "org.apache.sling.jcr.base",\
   "org.apache.sling.jcr.classloader",\
-  "org.apache.sling.jcr.jackrabbit.usermanager",\
   "org.apache.sling.jcr.oak.server",\
   "org.apache.sling.jcr.repoinit",\
   "org.apache.sling.jcr.webconsole"\
diff --git 
a/src/main/resources/org.apache.sling.jcr.repoinit.RepositoryInitializer~sling_jcr_jackrabbit_usermanager.config
 
b/src/main/resources/org.apache.sling.jcr.repoinit.RepositoryInitializer~sling_jcr_jackrabbit_usermanager.config
new file mode 100644
index 0000000..cd2d1a9
--- /dev/null
+++ 
b/src/main/resources/org.apache.sling.jcr.repoinit.RepositoryInitializer~sling_jcr_jackrabbit_usermanager.config
@@ -0,0 +1,3 @@
+references=[\
+  "classpath:sling-jcr-jackrabbit-usermanager.txt"\
+]
diff --git 
a/src/main/resources/org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl.amended~sling_jcr_jackrabbit_usermanager.config
 
b/src/main/resources/org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl.amended~sling_jcr_jackrabbit_usermanager.config
new file mode 100644
index 0000000..5899bc6
--- /dev/null
+++ 
b/src/main/resources/org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl.amended~sling_jcr_jackrabbit_usermanager.config
@@ -0,0 +1,3 @@
+user.mapping=[\
+  
"org.apache.sling.jcr.jackrabbit.usermanager\=[sling-jcr-jackrabbit-usermanager]"\
+]
diff --git a/src/main/resources/sling-jcr-jackrabbit-usermanager.txt 
b/src/main/resources/sling-jcr-jackrabbit-usermanager.txt
new file mode 100644
index 0000000..1893092
--- /dev/null
+++ b/src/main/resources/sling-jcr-jackrabbit-usermanager.txt
@@ -0,0 +1,5 @@
+create service user sling-jcr-jackrabbit-usermanager with path system/sling
+
+set principal ACL for sling-jcr-jackrabbit-usermanager
+  allow 
jcr:read,jcr:readAccessControl,jcr:modifyAccessControl,rep:write,rep:userManagement
 on /home
+end

Reply via email to