Node#addNode failes with AccessDeniedException if session lacks read-permission
to an acestor
---------------------------------------------------------------------------------------------
Key: JCR-1729
URL: https://issues.apache.org/jira/browse/JCR-1729
Project: Jackrabbit
Issue Type: Bug
Components: jackrabbit-core
Reporter: christian
Priority: Minor
Consider a Session that has following permissions:
/home -> no permission
/home/myself -> read|remove|set_property|add_node
if this session tries to add a Node to /home/myself.
An AccessDeniedException is thrown indicateing that it can not read /home.
The Exception is caused by the Node's check, if it is checked-out.
This check asumes that the session has read-access to all its ancestors.
Which breaks in this case:
see NodeImpl internalIsCheckedOut() (ln 3875)
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
