[
https://issues.apache.org/jira/browse/OAK-3021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14599477#comment-14599477
]
Lars Krapf commented on OAK-3021:
---------------------------------
+1 from me too. UserValidator may only validate visible nodes (see also
[~anchela]'s commit r1475715) - The non-wrapped Validator seems to have been
reintroduced by accident.
> UserValidator and AccessControlValidator must not process hidden nodes
> ----------------------------------------------------------------------
>
> Key: OAK-3021
> URL: https://issues.apache.org/jira/browse/OAK-3021
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: core, security
> Reporter: Marcel Reutegger
> Assignee: Marcel Reutegger
> Fix For: 1.2.3, 1.3.2, 1.0.16
>
> Attachments: OAK-3021.patch
>
>
> This is similar to OAK-3019 but for {{UserValidator}} and
> {{AccessControlValidator}}.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)