Hi, On Wed, Feb 5, 2014 at 1:15 PM, Angela Schreiber <[email protected]> wrote: > when discussing this in our weekly oak-meeting, tobi proposed > to change the permission evaluation for the move such that > modify-ac permission would be required on the source in order to > be able to complete the move. > > this approach would however break backwards compatibility on how > permissions are enforced upon move.
A possibly less intrusive alternative would be to require both read and remove permissions on the whole subtree being moved. Even without modify-ac, a user with full read/remove permissions could use other content operations to achieve pretty much the same effect as a move. BR, Jukka Zitting
