Santiago García Pimentel created SLING-6191:
-----------------------------------------------
Summary: Background servlets uses the user's session to create job
node
Key: SLING-6191
URL: https://issues.apache.org/jira/browse/SLING-6191
Project: Sling
Issue Type: Bug
Reporter: Santiago García Pimentel
When you call a background servlet, it will create a node by default in
/var/bg/jobs. This is done using the same session of the user that made the
request.
This causes problems since it is possible that the user does not have write
access to that directory. If this is the case the request will fail due to an
AccessDeniedException.
Also, the node doesn't seem exist by default, so you have to manually create it
to apply any permissions to it.
Instead the job node should be created with a dedicated user.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
