[
https://issues.apache.org/jira/browse/OAK-775?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13677963#comment-13677963
]
Michael Dürig commented on OAK-775:
-----------------------------------
At revision 1490575 I committed initial support for filtering observation
events based on access control restrictions. The underlying idea is to wrap the
{{NodeStateDiff}}, which generates the observation events by diffing a previous
state against a later state, into a {{SecureNodeStateDiff}}. The
{{SecureNodeStateDiff}} will only trigger call backs for accessible items and
at the same time wrap the passed nodes states into a secure one.
Currently {{SecureNodeStateDiff}} is a stub and does not implement access
control evaluation and securing of node states (see TODOs). In order to do that
we need to determine how to pass a {{SecurityContext}} (or similar concept) to
the observation manager.
> Implement backward compatible observation
> -----------------------------------------
>
> Key: OAK-775
> URL: https://issues.apache.org/jira/browse/OAK-775
> Project: Jackrabbit Oak
> Issue Type: Sub-task
> Components: core, jcr
> Reporter: Michael Dürig
> Assignee: Michael Dürig
> Attachments: OAK-775-isExternal.patch, OAK-775.patch
>
>
> As [discussed | http://markmail.org/message/6bqycmx6vbq7m25c] we might want
> look into implementing an alternative approach to observation, which trades
> some scalability for improved backward compatibility.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
