[
https://issues.apache.org/jira/browse/SLING-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eric Norman resolved SLING-1090.
--------------------------------
Resolution: Fixed
Fix Version/s: JCR Jackrabbit Access Manager 2.0.6
Launchpad Testing 6
fix committed in r919665 + added some unit tests
> PrivilegesInfo.canDelete(..) returns wrong value for children of the root node
> ------------------------------------------------------------------------------
>
> Key: SLING-1090
> URL: https://issues.apache.org/jira/browse/SLING-1090
> Project: Sling
> Issue Type: Bug
> Components: JCR
> Affects Versions: JCR Jackrabbit Access Manager 2.0.2
> Reporter: Eric Norman
> Assignee: Eric Norman
> Fix For: Launchpad Testing 6, JCR Jackrabbit Access Manager 2.0.6
>
> Attachments: SLING-1090_patch.txt
>
>
> When calling the
> org.apache.sling.jcr.jackrabbit.accessmanager.PrivilegesInfo.canDelete(session,
> absPath) for a path with only one segment (i.e. a child of root), the value
> returned
> is always false even if the current user does have permission to delete the
> node. It fails because the calculated parent path in this scenario resolves
> to an empty string instead of "/".
> The attached patch fixes this edge condition.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.