To answer my own question: Even the "everyone" group membership is not considered (if not explicitly added as principal name to the config). Konrad
On 2022/12/02 19:01:57 Konrad Windszus wrote: > Hi, > With https://issues.apache.org/jira/browse/SLING-6963 > <https://issues.apache.org/jira/browse/SLING-6963> the support for principal > names has been added to the Service User Mapper. > That in general does not consider group memberships. > What about the special group “everyone” > (https://jackrabbit.apache.org/oak/docs/security/user/membership.html#everyone-group-and-everyone-as-member > > <https://jackrabbit.apache.org/oak/docs/security/user/membership.html#everyone-group-and-everyone-as-member>). > Are the rights inherited in this case? > > I have seen weird effects were the rights are only inherited sometimes… > > Thanks for clarification. > Konrad
