[ 
https://issues.apache.org/jira/browse/SLING-9090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17049217#comment-17049217
 ] 

Angela Schreiber commented on SLING-9090:
-----------------------------------------

[~mohiaror], IMHO the remove should remove all matching entries and should also 
fix the deny-entries that have been created wrongfully. I just noticed that in 
case of the principal-based setup remove-entries even result in allows because 
the current code just checks for AclLine.Action.DENY and fails if it was a deny 
:(. So, a fix is anyway needed asap.

> AclLine.Action.REMOVE and AclLine.Action.REMOVE_ALL not handled in jcr 
> implementation
> -------------------------------------------------------------------------------------
>
>                 Key: SLING-9090
>                 URL: https://issues.apache.org/jira/browse/SLING-9090
>             Project: Sling
>          Issue Type: Bug
>          Components: Repoinit
>            Reporter: Angela Schreiber
>            Priority: Major
>
> [~bdelacretaz], while the documentation and the parser code provides the 
> ability to remove an individual or all access control entries, it seems the 
> JCR implementation doesn't actually support it.
> using it may lead to odd side effects or failures.... so, i think either the 
> parser should remove the support for Action.REMOVE and Action.REMOVE_ALL or 
> the jcr implementation part should respect it... at the very minimum it 
> should spot any usage of it and fail the repo-init if there is no way to 
> implement it properly. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to