[ 
https://issues.apache.org/jira/browse/OAK-1026?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Christan Keller updated OAK-1026:
---------------------------------

    Description: 
Set an Ace of an JackrabbitAccessControlList Policy with the composits of a an 
aggregate Privilege.
Eg. the jcr:addNode, jcr:createNode, ... of jcr:write

On read of the the AccessControlEntry.getPrivileges(), Oak returns the single 
privileges. 
On Jackrabbit the aggregate jcr:write is returned.

I'm aware that both behaviors are valid accoring the specification

{code}
    /**
     * Returns the privileges associated with this access control entry.
     *
     * @return an array of <code>Privilege</code>s.
     */
    public Privilege[] getPrivileges();
{code}

But it may get an migration issue. Though its occurence may be rare like in 
testcases.

  was:
Set an Ace of an JackrabbitAccessControlList Policy with the composits of a an 
aggregate Privilege.
Eg. the jcr:addNode, jcr:createNode, ... of jcr:write

On read of the the AccessControlEntry.getPrivileges() on Oak returns the single 
privileges. 
On Jackrabbit the aggregate jcr:write is returned.

I'm aware that both behaviors are valid accorind the specification

{code}
    /**
     * Returns the privileges associated with this access control entry.
     *
     * @return an array of <code>Privilege</code>s.
     */
    public Privilege[] getPrivileges();
{code}

But it may get an migration issue. Though its occurence may be rare like in 
testcases.

    
> AccessControlEntry.getPrivileges() behaves diffent than in Oak
> --------------------------------------------------------------
>
>                 Key: OAK-1026
>                 URL: https://issues.apache.org/jira/browse/OAK-1026
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: jcr, security
>    Affects Versions: 0.8
>            Reporter: Christan Keller
>            Priority: Minor
>         Attachments: Issue.java
>
>
> Set an Ace of an JackrabbitAccessControlList Policy with the composits of a 
> an aggregate Privilege.
> Eg. the jcr:addNode, jcr:createNode, ... of jcr:write
> On read of the the AccessControlEntry.getPrivileges(), Oak returns the single 
> privileges. 
> On Jackrabbit the aggregate jcr:write is returned.
> I'm aware that both behaviors are valid accoring the specification
> {code}
>     /**
>      * Returns the privileges associated with this access control entry.
>      *
>      * @return an array of <code>Privilege</code>s.
>      */
>     public Privilege[] getPrivileges();
> {code}
> But it may get an migration issue. Though its occurence may be rare like in 
> testcases.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to