Unico Hommes created JCR-3382:
---------------------------------
Summary: ItemManager.getNode does not do a permission check when
the item data is in the item manager cache
Key: JCR-3382
URL: https://issues.apache.org/jira/browse/JCR-3382
Project: Jackrabbit Content Repository
Issue Type: Bug
Reporter: Unico Hommes
Assignee: Unico Hommes
Fix For: 2.2.13, 2.4.3, 2.6
Read access should be checked irrespective of whether the item data is in the
cache or not. Something might have changed between first reading the node and
reading the node again that impacts read access.
We are running into the situation where node.hasNode() returns false for a node
that is in the item manager cache and for which access was revoked but
node.getNode() returns the node anyway. So node.hasNode is implemented in the
right way, but node.getNode is not.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
