[
https://issues.apache.org/jira/browse/SLING-6191?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Santiago García Pimentel updated SLING-6191:
--------------------------------------------
Description:
When you call a background servlet, it will create a node by default in
/var/bg/jobs. This is done using the same session of the user that made the
request.
This causes problems since it is possible that the user does not have write
access to that directory. If this is the case the request will fail due to an
AccessDeniedException.
Also, the node doesn't seem exist by default, so you have to manually create it
to apply any permissions to it.
Instead the job node should be created with a dedicated user.
I reproduced this with org.apache.sling.bgservlets 1.0.6
was:
When you call a background servlet, it will create a node by default in
/var/bg/jobs. This is done using the same session of the user that made the
request.
This causes problems since it is possible that the user does not have write
access to that directory. If this is the case the request will fail due to an
AccessDeniedException.
Also, the node doesn't seem exist by default, so you have to manually create it
to apply any permissions to it.
Instead the job node should be created with a dedicated user.
> Background servlets uses the user's session to create job node
> --------------------------------------------------------------
>
> Key: SLING-6191
> URL: https://issues.apache.org/jira/browse/SLING-6191
> Project: Sling
> Issue Type: Bug
> Components: Extensions
> Affects Versions: Background Servlets 1.0.8
> Reporter: Santiago García Pimentel
>
> When you call a background servlet, it will create a node by default in
> /var/bg/jobs. This is done using the same session of the user that made the
> request.
> This causes problems since it is possible that the user does not have write
> access to that directory. If this is the case the request will fail due to an
> AccessDeniedException.
> Also, the node doesn't seem exist by default, so you have to manually create
> it to apply any permissions to it.
> Instead the job node should be created with a dedicated user.
> I reproduced this with org.apache.sling.bgservlets 1.0.6
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
