[
https://issues.apache.org/jira/browse/OAK-1163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13827854#comment-13827854
]
Michael Dürig commented on OAK-1163:
------------------------------------
First draft at http://svn.apache.org/r1543881. [~anchela], could you have a
look?
> Observation events should respect permissions
> ---------------------------------------------
>
> Key: OAK-1163
> URL: https://issues.apache.org/jira/browse/OAK-1163
> Project: Jackrabbit Oak
> Issue Type: Sub-task
> Components: core, jcr, security
> Reporter: Alexander Klimetschek
> Labels: observation
>
> The JCR observation implementation in Oak does not evaluate ACLs yet, so any
> session currently sees all events. {{SecureValidator}} is the intended place
> to do the checks.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
