On 2 Jul 2010, at 11:58, Alexander Klimetschek wrote: >> >> I have a feeling this is just not possible in JCR2 at the AccessManager >> level since it cant distinguish between a direct request and a listing >> request, can you confirm ? > > Conceptually there is no "listing request". When you list sub nodes, > you get all nodes that you have access to. Thus there is a single > "jcr:read" permission which means access to this node and its > properties.
Ok, thanks for you help Ian