[
https://issues.apache.org/jira/browse/SLING-5228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15693348#comment-15693348
]
Robert Munteanu edited comment on SLING-5228 at 11/24/16 2:39 PM:
------------------------------------------------------------------
Actually IIUC with the default configurations we would be safe by just allowing
write access to {{/apps/sling/install}}. In which scenario would we need more
write access? I'm operating under the assumption that deployers with custom
configurations will configure ACLs accordingly.
_Edit_: missed some words
was (Author: rombert):
Actually IIUC with the default configurations we safe just allowing write
access to {{/apps/sling/install}}. In which scenario would we need more write
access? I'm operating under the assumption that deployers with custom
configurations will configure ACLs accordingly.
> Remove loginAdministrative() usage from
> org.apache.sling.installer.provider.jcr
> -------------------------------------------------------------------------------
>
> Key: SLING-5228
> URL: https://issues.apache.org/jira/browse/SLING-5228
> Project: Sling
> Issue Type: Improvement
> Components: Installer
> Reporter: Antonio Sanso
> Assignee: Robert Munteanu
> Fix For: JCR Installer 3.1.20
>
>
> Counted 4 occurrences
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
