[ 
https://issues.apache.org/jira/browse/OAK-6467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Alex Deparvu updated OAK-6467:
------------------------------
    Fix Version/s: 1.7.4

> CompositeTreePermission can create an invalid TreePermsssion object
> -------------------------------------------------------------------
>
>                 Key: OAK-6467
>                 URL: https://issues.apache.org/jira/browse/OAK-6467
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: core, security
>            Reporter: Alex Deparvu
>            Assignee: Alex Deparvu
>             Fix For: 1.7.4
>
>
> There's a case where the {{CompositePermissionProvider}} can create an 
> invalid {{TreePermsssion}} instance via the {{CompositeTreePermission}} 
> object. It can return a {{NO_RECOURSE}} if there's a single provider 
> configured (like the CUG) that is not able to handle that specific check.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to