[
https://issues.apache.org/jira/browse/JCR-3382?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Köll updated JCR-3382:
----------------------------
Fix Version/s: (was: 2.4.3)
Remove fix version tag because i want to release the 2.4.3 version.
> ItemManager.getNode does not do a permission check when the item data is in
> the item manager cache
> --------------------------------------------------------------------------------------------------
>
> Key: JCR-3382
> URL: https://issues.apache.org/jira/browse/JCR-3382
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Reporter: Unico Hommes
> Assignee: Unico Hommes
> Fix For: 2.2.13, 2.6
>
>
> Read access should be checked irrespective of whether the item data is in the
> cache or not. Something might have changed between first reading the node and
> reading the node again that impacts read access.
> We are running into the situation where node.hasNode() returns false for a
> node that is in the item manager cache and for which access was revoked but
> node.getNode() returns the node anyway. So node.hasNode is implemented in the
> right way, but node.getNode is not.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
