Author: angela
Date: Tue Apr 2 15:42:03 2019
New Revision: 1856831
URL: http://svn.apache.org/viewvc?rev=1856831&view=rev
Log:
OAK-8178 : Document missing support for multiplexing in Cug Authorization
Modified:
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/authorization/cug.md
Modified:
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/authorization/cug.md
URL:
http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/authorization/cug.md?rev=1856831&r1=1856830&r2=1856831&view=diff
==============================================================================
---
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/authorization/cug.md
(original)
+++
jackrabbit/oak/trunk/oak-doc/src/site/markdown/security/authorization/cug.md
Tue Apr 2 15:42:03 2019
@@ -164,6 +164,12 @@ node (access control content) is consequ
authorization modules. In case there was no module dealing with these
permissions,
access will be denied (see in section _Combining Multiple Authorization
Models_ for [details](composite.html#details)).
+#### Permission Evaluation with Multiplexed Stores
+
+The CUG authorization module is not designed to be used in combination with
non-default mounts. If any of the configured
+supported paths (see below) is found to be an ancestor of any non-default
mount or included therein the activation/modification
+of the `CugConfiguration` will fail with immediately and log an error.
+
### Representation in the Repository
CUG policies defined by this module in a dedicate node name `rep:cugPolicy` of
