[
https://issues.apache.org/jira/browse/OAK-6527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16118275#comment-16118275
]
angela commented on OAK-6527:
-----------------------------
[~stillalex], the patch looks good in general. just one question i had when
looking at the diff but maybe i just got confused by the diff:
- why is {{AbstractPermissionStore}} needed?
> CompositeNodeStore permission evaluation fails for open setups
> --------------------------------------------------------------
>
> Key: OAK-6527
> URL: https://issues.apache.org/jira/browse/OAK-6527
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: composite, security
> Affects Versions: 1.7.3, 1.7.4, 1.7.5
> Reporter: Alex Deparvu
> Assignee: Alex Deparvu
> Fix For: 1.7.6
>
>
> It seems the current setup of OR-ing the composite nodestore permission
> setups breaks down when the root node has an allow all reads. This seems a
> fundamental flaw in the way it works now, so I'm considering going back to
> the drawing board and working on the solution proposed by [~chetanm] as a
> part of OAK-3777, effectively making OAK-6356 and OAK-6469 obsolete.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)