[
https://issues.apache.org/jira/browse/OAK-8155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16847385#comment-16847385
]
angela commented on OAK-8155:
-----------------------------
[~stillalex], while waiting i noticed that the patch could easily be extended
such that effective policies obtained through the
{{CompositeAccessControlManager}} would equally reflect the stop in evaluation.
In other words: effective policies might reflect the 'abort' criteria used to
stop the permission evaluation -> variant 4 again with separated tests.
> CompositePermissionProvider: add possibility to abort evaluation
> ----------------------------------------------------------------
>
> Key: OAK-8155
> URL: https://issues.apache.org/jira/browse/OAK-8155
> Project: Jackrabbit Oak
> Issue Type: New Feature
> Components: security, security-spi
> Reporter: angela
> Assignee: angela
> Priority: Major
> Attachments: OAK-8155-2-test.patch, OAK-8155-2.patch,
> OAK-8155-3.patch, OAK-8155-4-test.patch, OAK-8155-4.patch,
> OAK-8155-test.patch, OAK-8155.patch
>
>
> when aggregating multiple authorization models we currently have the ability
> to choose between CompositionType.AND and CompositionType.OR for the
> evaluation of effective permissions. In other words as soon as more than 1
> PermissionProvider is present for the evaluation the results of that
> evaluation are either combined in an AND or OR fashion.
> however, we currently lack the ability to stop or abort the evaluation if a
> given provider instance was 'sufficient' to determine if a given set of
> permissions is granted or denied.
> [~stillalex], let's discuss ideas and options on how we could achieve this.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
