On Wed, Apr 24, 2013 at 1:28 PM, Jukka Zitting <[email protected]> wrote: > ...the indexing code checks whether children of > an oak:index node are of the oak:indexDefinition type, and the > security code verifies that only rep:accessControllable nodes can > contain ACLs....
Duck typing looks fine to me for index definition nodes, but for ACL I think the node types should be strictly enforced - if only to make sure that a search for rep:accessControllable nodes provides a complete picture of the current ACLs. I have no opinion on which layer should enforce that however, speaking only as a user here. -Bertrand
