Author: angela
Date: Fri Nov 18 13:35:08 2016
New Revision: 1770378
URL: http://svn.apache.org/viewvc?rev=1770378&view=rev
Log:
minor improvement: improve documentation
Modified:
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/permission/permissionsandprivileges.md
Modified:
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/permission/permissionsandprivileges.md
URL:
http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/permission/permissionsandprivileges.md?rev=1770378&r1=1770377&r2=1770378&view=diff
==============================================================================
---
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/permission/permissionsandprivileges.md
(original)
+++
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/permission/permissionsandprivileges.md
Fri Nov 18 13:35:08 2016
@@ -25,7 +25,8 @@ of a given session (or set of principals
to the repository.
For rare cases where the application needs to understand if a given session is
-actually allowed to perform a given action, it is recommend to use
`Session.hasPermission(String, String)`.
+actually allowed to perform a given action, it is recommend to use
`Session.hasPermission(String, String)`
+or `JackrabbitSession.hasPermission(String, String...)`
In order to test permissions that are not reflected in the action constants
defined on `Session` or `JackrabbitSession`, the default implementation also
allows
@@ -42,12 +43,31 @@ of privileges on `AccessControlManager`
- `Session.hasPermission(String absPath, String actions)`
- `Session.checkPermission(String absPath, String actions)`
+- `JackrabbitSession.hasPermission(String absPath, @Nonnull String... actions)`
Where
- `absPath` is an absolute path pointing to an existing or non-existing item
(node or property)
-- `actions` defines a comma-separated string of the actions defined on
`Session` and `JackrabbitSession`.
+- `actions` defines a comma-separated string (or string array respectively) of
the actions defined on `Session` and `JackrabbitSession` (see below).
With the default implementation also Oak internal permission names are
allowed ( _Note:_ permission names != privilege names)
+
+#### Supported Actions
+
+- `Session.ACTION_READ`
+- `Session.ACTION_ADD_NODE`
+- `Session.ACTION_SET_PROPERTY`
+- `Session.ACTION_REMOVE`
+
+- `JackrabbitSession.ACTION_ADD_PROPERTY`
+- `JackrabbitSession.ACTION_MODIFY_PROPERTY`
+- `JackrabbitSession.ACTION_REMOVE_PROPERTY`
+- `JackrabbitSession.ACTION_REMOVE_NODE`
+- `JackrabbitSession.ACTION_NODE_TYPE_MANAGEMENT`
+- `JackrabbitSession.ACTION_VERSIONING`
+- `JackrabbitSession.ACTION_LOCKING`
+- `JackrabbitSession.ACTION_READ_ACCESS_CONTROL`
+- `JackrabbitSession.ACTION_MODIFY_ACCESS_CONTROL`
+- `JackrabbitSession.ACTION_USER_MANAGEMENT`
#### Characteristics
