[jira] [Created] (SLING-7887) The CreateUserServlet should allow non-admin users to create a user if sufficient privileges have been granted

[Eric Norman (JIRA)]

Eric Norman created SLING-7887:
----------------------------------

             Summary: The CreateUserServlet should allow non-admin users to 
create a user if sufficient privileges have been granted
                 Key: SLING-7887
                 URL: https://issues.apache.org/jira/browse/SLING-7887
             Project: Sling
          Issue Type: Bug
    Affects Versions: JCR Jackrabbit User Manager 2.2.6
            Reporter: Eric Norman
            Assignee: Eric Norman
             Fix For: JCR Jackrabbit User Manager 2.2.8


If the current user has been granted the following privileges then they have 
enough rights to create a user in the oak impl of UserManager and should be 
allowed to do so:

jcr:readAccessControl 
 jcr:modifyAccessControl 
 rep:userManagement
 jcr:read
 rep:write



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)