angela created OAK-598:
--------------------------

             Summary: TreeLocation#NULL allows to reveal the existence of items 
that are not accessible
                 Key: OAK-598
                 URL: https://issues.apache.org/jira/browse/OAK-598
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: core, jcr
            Reporter: angela


the javadoc of TreeLocation#NULL states:
{quote}
This {@code TreeLocation} refers to an invalid location in a tree. That is
to a location where no item resides.
{quote}

while api consumers are not allowed to access items they are not allowed
to read, the NULL location allows to determine if a given item does really
not exist or was simply not accessible to the editing content session.

IMO this should be fixed by not exposing the NULL implementation and
making sure oak-jcr doesn't need it. maybe adding a shortcut method to
test the underlying item is not null (e.g. exists()).


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to