Hi,


I am trying to secure access to a ModifiableResourceProvider using a 
ResourceAccessSecurityGate. Typically a modifiable resource holds a reference 
to its provider and calls it whenever a value is changed (see [1]). However 
this pattern goes arround the ResourceAccessSecurity checks which are done in 
the ProviderHandler (see [2]).



How should we support ModifiableResources for ResourceAccessSecurity checks? 
Ultimately I think we might need to expose an api for sending changes to a 
resourceprovider and have a utility wrapper (like the ProviderHandler) that 
enforces security on all methods.



Marius







[1] 
https://github.com/apache/sling/blob/62b1ff1f8dcc9c4060b9f025ff915abb9779780c/contrib/extensions/mongodb/src/main/java/org/apache/sling/mongodb/impl/ChangeableValueMap.java

[2] 
https://github.com/apache/sling/blob/838ec33748f6cb5eb21d9dd0d8106adecc001f97/bundles/resourceresolver/src/main/java/org/apache/sling/resourceresolver/impl/tree/ProviderHandler.java



Reply via email to