angela created OAK-7982:
---------------------------

             Summary: ACL.addEntry: check for mandatory restrictions only 
respects single value restrictions
                 Key: OAK-7982
                 URL: https://issues.apache.org/jira/browse/OAK-7982
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: core, security
            Reporter: angela
            Assignee: angela


The validation of {{ACL.addEntry(Principal principal, Privilege[] privileges, 
boolean isAllow, Map<String, Value> restrictions, Map<String, Value[]> 
mvRestrictions)}}
includes a check that mandatory restrictions are actually present.

However, the code performing that check only tests if the mandatory 
restrictions are included in the {{restrictions}} ignoring the fact that a 
mandatory restriction might be multi-valued and thus provided in the 
{{mvRestrictions}} param.

cc: [~stillalex] fyi.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to