Roland Schaer created SLING-3152:
------------------------------------

             Summary: Allow for SlingPostServlet to force creation
                 Key: SLING-3152
                 URL: https://issues.apache.org/jira/browse/SLING-3152
             Project: Sling
          Issue Type: Improvement
          Components: Servlets
            Reporter: Roland Schaer
            Priority: Minor


A POST request to a resource of type {{StarSyntheticResource}} with a 
{{:nameHint}} parameter containing an existing node name will fail with an 
{{javax.jcr.AccessDeniedException}} if the user is not allowed to read the 
existing node.

JCR
/a (deny:everyone:jcr:all,allow:user1:jcr:all,allow:user2:jcr:all)
/a/test (deny:everyone:jcr:all, allow:user1:jcr:all)

user2 Request:
POST /a/*
:nameHint=test




--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to