Hi,
currently in 
https://github.com/apache/jackrabbit-filevault/blob/a39917d0088f84f9491eceac90cb0f15b250ec2f/vault-core/src/main/java/org/apache/jackrabbit/vault/packaging/impl/ZipVaultPackage.java#L185
 
<https://github.com/apache/jackrabbit-filevault/blob/a39917d0088f84f9491eceac90cb0f15b250ec2f/vault-core/src/main/java/org/apache/jackrabbit/vault/packaging/impl/ZipVaultPackage.java#L185>
 the extract method fails in case the package contains a hook and the 
installing user is not an admin user.

That leads to problems, whenever you do some package operations with service 
users (like e.g. is the case reported in 
https://github.com/Adobe-Consulting-Services/acs-aem-commons/issues/1478 
<https://github.com/Adobe-Consulting-Services/acs-aem-commons/issues/1478>).
What is the reason, why only admin users are supposed to install or even dry 
run packages containing hooks?

I think dry-runs in combination with a listener are the best (only?) way to 
recursively figure out, which nodes are covered by a package. Those dry-runs 
shouldn't require an admin session IMHO.

WDYT?
Thanks,
Konrad

Reply via email to