[
https://issues.apache.org/jira/browse/SLING-7259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16260907#comment-16260907
]
Lydia Puric commented on SLING-7259:
------------------------------------
I tried to enter an empty restriction as following in AEM's base granite model:
[:repoinit]
create service user test-service
set ACL for test-service
allow jcr:read on / restriction(rep:glob,)
end
and like this:
restriction(rep:glob,"")
restriction(rep:glob,'')
In all cases the repository stopped at bundle 29 with an Authorization Failure.
> Repo Init: Empty glob causes repo-init fail
> -------------------------------------------
>
> Key: SLING-7259
> URL: https://issues.apache.org/jira/browse/SLING-7259
> Project: Sling
> Issue Type: Bug
> Components: Repoinit
> Reporter: Lydia Puric
>
> According to
> https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html
> empty glob is supported to restrict access only the node but not its
> subtrees.
> Doing this it causes the repo-init to fail.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
