sure... i thought the issue reference would be enough :-) OAK-2015 addresses a bug with the handling of jcr:all in the permission store. more precisely: since jcr:all is a dynamic privilege the corresponding entries in the permission store must reflect that dynamic nature and not the set of aggregated privileges at the point when the permission store entry is being created.
that's imo a critical issue that will cause an inconsistent permission store if privileges are being registered after repository initialization. OAK-2255 fixes a bug introduced by addressing OAK-2015. the fix is trivial. hope that helps angela On 13/11/14 13:42, "Michael Dürig" <[email protected]> wrote: > >> >> based on a discussion wrt merging fixes into the 1.0 branch, >> i would like to suggest that we merge both fixes OAK-2015 >> and OAK-2255 into the branch. > > >+1 > >It would be helpful for people who weren't involved with the details to >add a bit of context like, why you think it is important and safe to >back port. > >Michael
