[
https://issues.apache.org/jira/browse/SLING-5921?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15399158#comment-15399158
]
Oliver Lietz commented on SLING-5921:
-------------------------------------
Yes. I've enabled {{RandomAuthorizableNodeName}} for Karaf and have a working
repoinit setup and Scripting Thymeleaf using a service user to resolve scripts
({{SlingResourceTemplateResolver}}) from JCR. I don't think we have any tests
querying users by resource name over HTTP.
{noformat}
[INFO] Apache Sling - Karaf Features ...................... SUCCESS [ 6.264 s]
[INFO] Apache Sling - Karaf Distribution .................. SUCCESS [ 23.461 s]
[INFO] Apache Sling - Karaf Integration Tests ............. SUCCESS [11:11 min]
[INFO] Apache Sling - Karaf Launchpad Integration Tests (Oak Tar) SUCCESS
[02:13 min]
[INFO] Apache Sling - Karaf Builder ....................... SUCCESS [ 9.261 s]
{noformat}
> Enable Oak's RandomAuthorizableNodeName
> ---------------------------------------
>
> Key: SLING-5921
> URL: https://issues.apache.org/jira/browse/SLING-5921
> Project: Sling
> Issue Type: Improvement
> Components: Karaf, Launchpad
> Reporter: Oliver Lietz
> Assignee: Oliver Lietz
> Fix For: Karaf Features 0.2.0, Launchpad Builder 9
>
>
> See comments in SLING-5848 about _save_ user names.
> [{{RandomAuthorizableNodeName}}|https://jackrabbit.apache.org/oak/docs/apidocs/org/apache/jackrabbit/oak/security/user/RandomAuthorizableNodeName.html]
> is used in AEM already to not reveal the ID of the authorizable.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
