[
https://issues.apache.org/jira/browse/JCR-3930?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kamil updated JCR-3930:
-----------------------
Description:
while setting privileges one can set rep:nodePath and rep:glob to a particular
path:
{noformat}
Map<String, Value> restrictions = new HashMap<String, Value>();
ValueFactory vf = session.getValueFactory();
restrictions.put("rep:nodePath", vf.createValue("/foo", PropertyType.PATH));
restrictions.put("rep:glob", vf.createValue("*"));
{noformat}
where according to this doc
http://jackrabbit.apache.org/api/2.2/org/apache/jackrabbit/core/security/authorization/GlobPattern.html
:
{noformat}
"*" means all "foo" siblings and the siblings' descendants
"" means this "foo" folder only
and not setting rep:glob at all means "foo" folder and its children.
{noformat}
It works correctly for all path besides "/" where setting rep:glob to "" (empty
string) doesn't change anything and user can read all children of "/" but also
all its children's descendants
was:
while setting privileges one can set rep:nodePath and rep:glob to a particular
path:
{noformat}
Map<String, Value> restrictions = new HashMap<String, Value>();
ValueFactory vf = session.getValueFactory();
restrictions.put("rep:nodePath", vf.createValue("/foo", PropertyType.PATH));
restrictions.put("rep:glob", vf.createValue("*"));
{noformat}
where according to this doc
http://jackrabbit.apache.org/api/2.2/org/apache/jackrabbit/core/security/authorization/GlobPattern.html:
{noformat}
"*" means all "foo" siblings and the siblings' descendants
"" means this "foo" folder only
and not setting rep:glob at all means "foo" folder and its children.
{noformat}
It works correctly for all path besides "/" where setting rep:glob to "" (empty
string) doesn't change anything and user can read all children of "/" but also
all its children's descendants
> rep:glob doesn't affect "/"
> ---------------------------
>
> Key: JCR-3930
> URL: https://issues.apache.org/jira/browse/JCR-3930
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Reporter: Kamil
>
> while setting privileges one can set rep:nodePath and rep:glob to a
> particular path:
> {noformat}
> Map<String, Value> restrictions = new HashMap<String, Value>();
> ValueFactory vf = session.getValueFactory();
> restrictions.put("rep:nodePath", vf.createValue("/foo", PropertyType.PATH));
> restrictions.put("rep:glob", vf.createValue("*"));
> {noformat}
> where according to this doc
> http://jackrabbit.apache.org/api/2.2/org/apache/jackrabbit/core/security/authorization/GlobPattern.html
> :
> {noformat}
> "*" means all "foo" siblings and the siblings' descendants
> "" means this "foo" folder only
> and not setting rep:glob at all means "foo" folder and its children.
> {noformat}
> It works correctly for all path besides "/" where setting rep:glob to ""
> (empty string) doesn't change anything and user can read all children of "/"
> but also all its children's descendants
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
