[
https://issues.apache.org/jira/browse/OAK-7982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
angela updated OAK-7982:
------------------------
Fix Version/s: 1.11.0
> ACL.addEntry: check for mandatory restrictions only respects single value
> restrictions
> --------------------------------------------------------------------------------------
>
> Key: OAK-7982
> URL: https://issues.apache.org/jira/browse/OAK-7982
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: core, security
> Reporter: angela
> Assignee: angela
> Priority: Major
> Fix For: 1.11.0, 1.10.1
>
> Attachments: OAK-7982.patch
>
>
> The validation of {{ACL.addEntry(Principal principal, Privilege[] privileges,
> boolean isAllow, Map<String, Value> restrictions, Map<String, Value[]>
> mvRestrictions)}}
> includes a check that mandatory restrictions are actually present.
> However, the code performing that check only tests if the mandatory
> restrictions are included in the {{restrictions}} ignoring the fact that a
> mandatory restriction might be multi-valued and thus provided in the
> {{mvRestrictions}} param.
> cc: [~stillalex] fyi.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
