[
https://issues.apache.org/jira/browse/OAK-842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13680326#comment-13680326
]
Michael Dürig commented on OAK-842:
-----------------------------------
bq. It wasn't obvious to me how to get access to the raw NodeBuilder...
Probably because this is only available since http://svn.apache.org/r1489852
bq. We could declare that all such internal data should always be placed under
an ":internal" child node.
This would be a step towards resolving OAK-753: all items whose name start with
a colon are internal to {{NodeState}}. Except for :internal, which is internal
to {{Tree}}. Sound good to me.
> Incorrect interaction of orderable child nodes with access control
> -------------------------------------------------------------------
>
> Key: OAK-842
> URL: https://issues.apache.org/jira/browse/OAK-842
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: core
> Reporter: Michael Dürig
>
> Working on OAK-813 revealed problems with the interaction of the current
> implementation of orderable nodes and access control:
> * {{TreeImpl#getOrderedChildNames}} returns all child names regardless
> whether they are accessible in the current session or not. This might cause
> errors further down the line like exposure of the existence of child nodes.
> * {{TreeImpl.remove}} doesn't (can't) update the child order property if the
> parent is not accessible.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
