[ 
https://issues.apache.org/jira/browse/OAK-5354?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15769677#comment-15769677
 ] 

Thomas Mueller commented on OAK-5354:
-------------------------------------

http://svn.apache.org/r1775605 (improved test case)

> Security: the order of child should be correct if the child nodes are 
> readable.
> -------------------------------------------------------------------------------
>
>                 Key: OAK-5354
>                 URL: https://issues.apache.org/jira/browse/OAK-5354
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>            Reporter: Thomas Mueller
>            Assignee: Thomas Mueller
>             Fix For: 1.5.17, 1.6
>
>
> If access rights are set such that a session can read child nodes of a node, 
> then that session should also be able to read the child nodes in the right 
> order (for orderable nodes). Even if the session does not have permission to 
> read the properties of a node.
> The order of child nodes is stored in a hidden property. Access rights for 
> this hidden property are currently checked in the same way as access rights 
> for regular properties.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to