Eric Norman created SLING-7886:
----------------------------------

             Summary: AuthorizablePrivilegesInfo returns incorrect information 
for non-admin user who has been granted sufficient privileges to do User/Group 
Management activites
                 Key: SLING-7886
                 URL: https://issues.apache.org/jira/browse/SLING-7886
             Project: Sling
          Issue Type: Bug
    Affects Versions: JCR Jackrabbit User Manager 2.2.6
            Reporter: Eric Norman
            Assignee: Eric Norman
             Fix For: JCR Jackrabbit User Manager 2.2.8


AuthorizablePrivilegesInfo returns incorrect information for non-admin user who 
has been granted sufficient privileges to do User/Group Management activities

It looks like the oak impl of UserManager requires these privileges to be 
granted on the /home/users or /home/groups folders for the user to be able to 
do user/group management calls:

jcr:readAccessControl 
 jcr:modifyAccessControl 
 rep:userManagement
 jcr:read
 rep:write

 

So if those privileges are granted, then the AuthorizablePrivilegesInfo#can* 
calls should return true.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to