[
https://issues.apache.org/jira/browse/SLING-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eric Norman resolved SLING-7887.
--------------------------------
Resolution: Fixed
Fixed at:
[https://github.com/apache/sling-org-apache-sling-jcr-jackrabbit-usermanager/commit/d89bcd92f48bf42c28e9cd37a81d8f5b38361db5#diff-ad9077962ed0c1d4663683f490b1a073]
[https://github.com/apache/sling-org-apache-sling-jcr-jackrabbit-usermanager/commit/141637a6afaae62f593eb45ab4721b5b356e3182#diff-ad9077962ed0c1d4663683f490b1a073]
Tests added at:
[https://github.com/apache/sling-org-apache-sling-launchpad-integration-tests/commit/a65f6db6734fc04f288e307fc94c863ca1e69ee1]
> The CreateUserServlet should allow non-admin users to create a user if
> sufficient privileges have been granted
> --------------------------------------------------------------------------------------------------------------
>
> Key: SLING-7887
> URL: https://issues.apache.org/jira/browse/SLING-7887
> Project: Sling
> Issue Type: Bug
> Affects Versions: JCR Jackrabbit User Manager 2.2.6
> Reporter: Eric Norman
> Assignee: Eric Norman
> Priority: Major
> Fix For: JCR Jackrabbit User Manager 2.2.8
>
>
> If the current user has been granted the following privileges then they have
> enough rights to create a user in the oak impl of UserManager and should be
> allowed to do so:
> jcr:readAccessControl
> jcr:modifyAccessControl
> rep:userManagement
> jcr:read
> rep:write
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
