[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17184810#comment-17184810
]
Tobias Bocanegra commented on JCRVLT-472:
-
I think the best alternative would be to create 3 packages:
- a package with the principal (A)
- a package with the content using the principal (B), having a dependency on
package (A)
- a container package (C) that contains the packages A and B.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:359)
>
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17184078#comment-17184078
]
Angela Schreiber commented on JCRVLT-472:
-
[~rombert], afaik the 'problem' is that principal lookup performs a query and
queries on oak are performed on the persisted content (only exception: uuid
lookup for which a workaround exists) so even processing content in a
different order would not help (unless there was an intermediate Session.save
or fvault would remember the principals itself).
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
>
Re: [filevault] Installing users and access control entries in the same package
hi robert glad that it helped. for features like jackrabbit fvault or sling content distribution the contract imposed by the specification seems just a bit too restrictive... also the specification doesn't define how principals are managed (easy way out ). anyway that's why the additional import-behavior option exists both for access control content as well as for user management (group membership, impersonating principals) in oak. kind regards angela From: Robert Munteanu Sent: Tuesday, August 25, 2020 1:24 PM To: oak-dev@jackrabbit.apache.org Subject: Re: [filevault] Installing users and access control entries in the same package Hi Angela, On Tue, 2020-08-25 at 07:39 +, Angela Schreiber wrote: > hi robert > > without having a closer look, i would suspect that your repository > comes with default import-behavior configuration that strictly > follows JCR specification which mandates a given principal to exist > when dealing with access control management. oak comes with a variety > of import-behavior options and if you configure it to be > 'besteffort', it will allow to create ACEs for principals, which do > not yet exist. That does help, thank you. I've swiched the Sling Starter to use this configuration from now on. Best regards, Robert > > hope that helps > angela > > From: Robert Munteanu > Sent: Friday, August 21, 2020 6:47 PM > To: oak-dev@jackrabbit.apache.org > Subject: [filevault] Installing users and access control entries in > the same package > > Hi, > > I am trying to install a content package that includes: > > - two users under /home/users/slingshot > - content with ACEs that reference the two users under > /content/slingshot > > When installing the content packages I see that the /content entry is > processed first, leading to errors like > > E /content/slingshot/users/slingshot1/rep:policy > ! org.xml.sax.SAXException: > javax.jcr.security.AccessControlException: Unknown principal > slingshot1 > javax.jcr.security.AccessControlException: Unknown principal > slingshot1 > > and only later on is the user created > > - /home > - /home/users > A /home/users/slingshot > A /home/users/slingshot/slingshot1 > > Obviously, reinstalling the content package fixes the problem but I'm > looking for a more error-safe way of installing the content package. > > How can I install this content package with users and ACEs from > without > errors? > > Thanks, > Robert >
Re: [filevault] Installing users and access control entries in the same package
Hi Angela, On Tue, 2020-08-25 at 07:39 +, Angela Schreiber wrote: > hi robert > > without having a closer look, i would suspect that your repository > comes with default import-behavior configuration that strictly > follows JCR specification which mandates a given principal to exist > when dealing with access control management. oak comes with a variety > of import-behavior options and if you configure it to be > 'besteffort', it will allow to create ACEs for principals, which do > not yet exist. That does help, thank you. I've swiched the Sling Starter to use this configuration from now on. Best regards, Robert > > hope that helps > angela > > From: Robert Munteanu > Sent: Friday, August 21, 2020 6:47 PM > To: oak-dev@jackrabbit.apache.org > Subject: [filevault] Installing users and access control entries in > the same package > > Hi, > > I am trying to install a content package that includes: > > - two users under /home/users/slingshot > - content with ACEs that reference the two users under > /content/slingshot > > When installing the content packages I see that the /content entry is > processed first, leading to errors like > > E /content/slingshot/users/slingshot1/rep:policy > ! org.xml.sax.SAXException: > javax.jcr.security.AccessControlException: Unknown principal > slingshot1 > javax.jcr.security.AccessControlException: Unknown principal > slingshot1 > > and only later on is the user created > > - /home > - /home/users > A /home/users/slingshot > A /home/users/slingshot/slingshot1 > > Obviously, reinstalling the content package fixes the problem but I'm > looking for a more error-safe way of installing the content package. > > How can I install this content package with users and ACEs from > without > errors? > > Thanks, > Robert >
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183936#comment-17183936
]
Robert Munteanu commented on JCRVLT-472:
I confirm that configuring
{{org.apache.jackrabbit.oak.security.authorization.AuthorizationConfigurationImpl}}
with "besteffort" import behaviour does fix the package install. It would be
good IMO to not require this setting for this particular scenario ( principal
policy nested under principal ).
Note that this is different scenario that the one on the oak-dev list I asked
about in
https://lists.apache.org/thread.html/r94b8b31d3da59d18e3eaced1594c453fc7759b62d26474a42c3dbbe3%40%3Coak-dev.jackrabbit.apache.org%3E
.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
>
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183908#comment-17183908
]
Robert Munteanu commented on JCRVLT-472:
Thank you for your comments. For extended context, the principal is part of the
content package and included in the operation, judging by the log
{noformat}Creating snapshot for package
org.apache.sling:sling-slingshot-apps-pkg:1.0-SNAPSHOT
A META-INF
A META-INF/MANIFEST.MF
A META-INF/vault
A META-INF/vault/config.xml
A META-INF/vault/filter.xml
A META-INF/vault/nodetypes.cnd
A META-INF/vault/properties.xml
A /.content.xml
A /home
A /home/.content.xml
A /home/users
A /home/users/.content.xml
A /home/users/system
A /home/users/system/.content.xml
- Aggregation status: 3 of 1 prepared, 2 collected
A META-INF/vault/definition/.content.xml
Collecting import information...
Installing node types...
Installing privileges...
Importing content...
- /
- /home
- /home/users
- /home/users/system
A /home/users/system/sling
A /home/users/system/sling/slingshot
E /home/users/system/sling/slingshot/rep:principalPolicy
! org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
Unsupported principal slingshot-service
javax.jcr.security.AccessControlException: Unsupported principal
slingshot-service
saving approx 4 nodes...
Package imported (with errors, check logs!)
{noformat}
When reinstalling the package, this works as expected
{noformat}Collecting import information...
Installing node types...
Installing privileges...
Importing content...
- /
- /home
- /home/users
- /home/users/system
- /home/users/system/sling
A /home/users/system/sling/slingshot
saving approx 2 nodes...
Package imported.
{noformat}
So IMHO the principal is there, but not noticed when importing for some reason.
I will try the {{besteffort}} workaround, for the sake of completeness.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
>
[jira] [Comment Edited] (JCR-4563) test OSGi bundles
[ https://issues.apache.org/jira/browse/JCR-4563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105390#comment-17105390 ] Julian Reschke edited comment on JCR-4563 at 8/25/20, 9:55 AM: --- trunk: (2.21.2) [r1879150|http://svn.apache.org/r1879150] (2.21.1) [r1877390|http://svn.apache.org/r1877390] 2.20: [r1879151|http://svn.apache.org/r1879151] (2.20.1) [r1877649|http://svn.apache.org/r1877649] 2.18: (2.18.6) [r1879152|http://svn.apache.org/r1879152] [r1878621|http://svn.apache.org/r1878621] [r1878620|http://svn.apache.org/r1878620] 2.16: [r1881181|http://svn.apache.org/r1881181] [r1881180|http://svn.apache.org/r1881180] was (Author: reschke): trunk: [r1879150|http://svn.apache.org/r1879150] (2.21.1) [r1877390|http://svn.apache.org/r1877390] 2.20: [r1879151|http://svn.apache.org/r1879151] (2.20.1) [r1877649|http://svn.apache.org/r1877649] 2.18: [r1879152|http://svn.apache.org/r1879152] [r1878621|http://svn.apache.org/r1878621] [r1878620|http://svn.apache.org/r1878620] > test OSGi bundles > - > > Key: JCR-4563 > URL: https://issues.apache.org/jira/browse/JCR-4563 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: test >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Major > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > > Similar to what we do in oak-it-osgi. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4563) test OSGi bundles
[ https://issues.apache.org/jira/browse/JCR-4563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4563: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > test OSGi bundles > - > > Key: JCR-4563 > URL: https://issues.apache.org/jira/browse/JCR-4563 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: test >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Major > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > > Similar to what we do in oak-it-osgi. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4563) test OSGi bundles
[ https://issues.apache.org/jira/browse/JCR-4563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4563: Fix Version/s: 2.16.7 > test OSGi bundles > - > > Key: JCR-4563 > URL: https://issues.apache.org/jira/browse/JCR-4563 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: test >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Major > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > > Similar to what we do in oak-it-osgi. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Comment Edited] (JCR-4564) jackrabbit-jcr-server: remove obsolete workaround for scr-plugin
[ https://issues.apache.org/jira/browse/JCR-4564?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105238#comment-17105238 ] Julian Reschke edited comment on JCR-4564 at 8/25/20, 9:09 AM: --- trunk: (2.21.1) [r1877391|http://svn.apache.org/r1877391] 2.20: (2.20.1) [r1877651|http://svn.apache.org/r1877651] 2.18: (2.18.6) [r1878624|http://svn.apache.org/r1878624] 2.16: [r1881179|http://svn.apache.org/r1881179] [r1881135|http://svn.apache.org/r1881135] [r1881134|http://svn.apache.org/r1881134] was (Author: reschke): trunk: (2.21.1) [r1877391|http://svn.apache.org/r1877391] 2.20: (2.20.1) [r1877651|http://svn.apache.org/r1877651] 2.18: [r1878624|http://svn.apache.org/r1878624] > jackrabbit-jcr-server: remove obsolete workaround for scr-plugin > > > Key: JCR-4564 > URL: https://issues.apache.org/jira/browse/JCR-4564 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4564) jackrabbit-jcr-server: remove obsolete workaround for scr-plugin
[ https://issues.apache.org/jira/browse/JCR-4564?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4564: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > jackrabbit-jcr-server: remove obsolete workaround for scr-plugin > > > Key: JCR-4564 > URL: https://issues.apache.org/jira/browse/JCR-4564 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4564) jackrabbit-jcr-server: remove obsolete workaround for scr-plugin
[ https://issues.apache.org/jira/browse/JCR-4564?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4564: Fix Version/s: 2.16.7 > jackrabbit-jcr-server: remove obsolete workaround for scr-plugin > > > Key: JCR-4564 > URL: https://issues.apache.org/jira/browse/JCR-4564 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Comment Edited] (JCR-4562) Remove workaround for FELIX-2492
[ https://issues.apache.org/jira/browse/JCR-4562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105312#comment-17105312 ] Julian Reschke edited comment on JCR-4562 at 8/25/20, 8:49 AM: --- trunk: (2.21.1) [r1877379|http://svn.apache.org/r1877379] 2.20: (2.20.1) [r1877644|http://svn.apache.org/r1877644] 2.18: (2.18.6) [r1878617|http://svn.apache.org/r1878617] 2.16: [r1881178|http://svn.apache.org/r1881178] was (Author: reschke): trunk: (2.21.1) [r1877379|http://svn.apache.org/r1877379] 2.20: (2.20.1) [r1877644|http://svn.apache.org/r1877644] 2.18: [r1878617|http://svn.apache.org/r1878617] > Remove workaround for FELIX-2492 > - > > Key: JCR-4562 > URL: https://issues.apache.org/jira/browse/JCR-4562 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Trivial > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4562) Remove workaround for FELIX-2492
[ https://issues.apache.org/jira/browse/JCR-4562?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4562: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > Remove workaround for FELIX-2492 > - > > Key: JCR-4562 > URL: https://issues.apache.org/jira/browse/JCR-4562 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Trivial > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4562) Remove workaround for FELIX-2492
[ https://issues.apache.org/jira/browse/JCR-4562?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4562: Fix Version/s: 2.16.7 > Remove workaround for FELIX-2492 > - > > Key: JCR-4562 > URL: https://issues.apache.org/jira/browse/JCR-4562 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Trivial > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Comment Edited] (JCR-4561) webapp: update htmlunit dependency to 2.40.0
[ https://issues.apache.org/jira/browse/JCR-4561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105298#comment-17105298 ] Julian Reschke edited comment on JCR-4561 at 8/25/20, 8:28 AM: --- trunk: (2.21.1) [r1877371|http://svn.apache.org/r1877371] 2.20: (2.20.1) [r1877643|http://svn.apache.org/r1877643] 2.18: (2.18.6) [r1878618|http://svn.apache.org/r1878618] 2.16: [r1881175|http://svn.apache.org/r1881175] was (Author: reschke): trunk: (2.21.1) [r1877371|http://svn.apache.org/r1877371] 2.20: (2.20.1) [r1877643|http://svn.apache.org/r1877643] 2.18: [r1878618|http://svn.apache.org/r1878618] > webapp: update htmlunit dependency to 2.40.0 > > > Key: JCR-4561 > URL: https://issues.apache.org/jira/browse/JCR-4561 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-webapp >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4561) webapp: update htmlunit dependency to 2.40.0
[ https://issues.apache.org/jira/browse/JCR-4561?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4561: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > webapp: update htmlunit dependency to 2.40.0 > > > Key: JCR-4561 > URL: https://issues.apache.org/jira/browse/JCR-4561 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-webapp >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4561) webapp: update htmlunit dependency to 2.40.0
[ https://issues.apache.org/jira/browse/JCR-4561?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4561: Fix Version/s: 2.16.7 > webapp: update htmlunit dependency to 2.40.0 > > > Key: JCR-4561 > URL: https://issues.apache.org/jira/browse/JCR-4561 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-webapp >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Comment Edited] (JCR-4560) Update h2db dependency to 1.4.200
[ https://issues.apache.org/jira/browse/JCR-4560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105271#comment-17105271 ] Julian Reschke edited comment on JCR-4560 at 8/25/20, 8:07 AM: --- trunk: (2.21.1) [r1877365|http://svn.apache.org/r1877365] 2.20: (2.20.1) [r1877640|http://svn.apache.org/r1877640] 2.18: (2.18.6) [r1878616|http://svn.apache.org/r1878616] 2.16: [r1881174|http://svn.apache.org/r1881174] was (Author: reschke): trunk: (2.21.1) [r1877365|http://svn.apache.org/r1877365] 2.20: (2.20.1) [r1877640|http://svn.apache.org/r1877640] 2.18: [r1878616|http://svn.apache.org/r1878616] > Update h2db dependency to 1.4.200 > - > > Key: JCR-4560 > URL: https://issues.apache.org/jira/browse/JCR-4560 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: core >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4560) Update h2db dependency to 1.4.200
[ https://issues.apache.org/jira/browse/JCR-4560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4560: Fix Version/s: 2.16.7 > Update h2db dependency to 1.4.200 > - > > Key: JCR-4560 > URL: https://issues.apache.org/jira/browse/JCR-4560 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: core >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4560) Update h2db dependency to 1.4.200
[ https://issues.apache.org/jira/browse/JCR-4560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4560: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > Update h2db dependency to 1.4.200 > - > > Key: JCR-4560 > URL: https://issues.apache.org/jira/browse/JCR-4560 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: core >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183839#comment-17183839
]
Angela Schreiber commented on JCRVLT-472:
-
[~tripod], no problem. you are welcome
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:359)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.install(JcrPackageImpl.java:353)
> [org.apache.jackrabbit.vault:3.4.6]
> at
>
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183828#comment-17183828
]
Tobias Bocanegra commented on JCRVLT-472:
-
thanks [~angela]. I totally forgot that `isNodeType()` is inheritance aware.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:359)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.install(JcrPackageImpl.java:353)
>
[jira] [Comment Edited] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183822#comment-17183822
]
Angela Schreiber edited comment on JCRVLT-472 at 8/25/20, 7:45 AM:
---
[~tripod], afaik {{rep:principalPolicy}} is supported by fvault the
principal-based policy extends from rep:Policy.
[~rombert], i believe you need to either import the principal first or change
the repository configuration to have importbehavior=besteffort defined.
alternatively, you try to define princiopal-based access control setup for a
principal that is not supported (wrong principal type or unsupported path. see
http://jackrabbit.apache.org/oak/docs/security/authorization/principalbased.html
for details).
was (Author: anchela):
[~tripod], afaik {{rep:principalPolicy}} is supported by fvault the
principal-based policy extends from rep:Policy.
[~rombert], i believe you need to either import the principal first or change
the repository configuration to have importbehavior=besteffort defined.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
>
[jira] [Commented] (JCRVLT-472) Content package with principal policy fails to install when the user is in the same package
[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183822#comment-17183822
]
Angela Schreiber commented on JCRVLT-472:
-
[~tripod], afaik {{rep:principalPolicy}} is supported by fvault the
principal-based policy extends from rep:Policy.
[~rombert], i believe you need to either import the principal first or change
the repository configuration to have importbehavior=besteffort defined.
> Content package with principal policy fails to install when the user is in
> the same package
> ---
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
>Reporter: Robert Munteanu
>Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
> at
>
[jira] [Comment Edited] (JCR-4559) Update commons file-upload dependency to 1.4
[ https://issues.apache.org/jira/browse/JCR-4559?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105242#comment-17105242 ] Julian Reschke edited comment on JCR-4559 at 8/25/20, 7:43 AM: --- trunk: (2.21.1) [r1877364|http://svn.apache.org/r1877364] 2.20: (2.20.1) [r1877639|http://svn.apache.org/r1877639] 2.18: (2.18.6) [r1878615|http://svn.apache.org/r1878615] 2.16: [r1881173|http://svn.apache.org/r1881173] was (Author: reschke): trunk: (2.21.1) [r1877364|http://svn.apache.org/r1877364] 2.20: (2.20.1) [r1877639|http://svn.apache.org/r1877639] 2.18: [r1878615|http://svn.apache.org/r1878615] > Update commons file-upload dependency to 1.4 > > > Key: JCR-4559 > URL: https://issues.apache.org/jira/browse/JCR-4559 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server, parent >Affects Versions: 2.22 >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4559) Update commons file-upload dependency to 1.4
[ https://issues.apache.org/jira/browse/JCR-4559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4559: Fix Version/s: 2.16.7 > Update commons file-upload dependency to 1.4 > > > Key: JCR-4559 > URL: https://issues.apache.org/jira/browse/JCR-4559 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server, parent >Affects Versions: 2.22 >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4559) Update commons file-upload dependency to 1.4
[ https://issues.apache.org/jira/browse/JCR-4559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4559: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > Update commons file-upload dependency to 1.4 > > > Key: JCR-4559 > URL: https://issues.apache.org/jira/browse/JCR-4559 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: jackrabbit-jcr-server, parent >Affects Versions: 2.22 >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
Re: [filevault] Installing users and access control entries in the same package
hi robert without having a closer look, i would suspect that your repository comes with default import-behavior configuration that strictly follows JCR specification which mandates a given principal to exist when dealing with access control management. oak comes with a variety of import-behavior options and if you configure it to be 'besteffort', it will allow to create ACEs for principals, which do not yet exist. hope that helps angela From: Robert Munteanu Sent: Friday, August 21, 2020 6:47 PM To: oak-dev@jackrabbit.apache.org Subject: [filevault] Installing users and access control entries in the same package Hi, I am trying to install a content package that includes: - two users under /home/users/slingshot - content with ACEs that reference the two users under /content/slingshot When installing the content packages I see that the /content entry is processed first, leading to errors like E /content/slingshot/users/slingshot1/rep:policy ! org.xml.sax.SAXException: javax.jcr.security.AccessControlException: Unknown principal slingshot1 javax.jcr.security.AccessControlException: Unknown principal slingshot1 and only later on is the user created - /home - /home/users A /home/users/slingshot A /home/users/slingshot/slingshot1 Obviously, reinstalling the content package fixes the problem but I'm looking for a more error-safe way of installing the content package. How can I install this content package with users and ACEs from without errors? Thanks, Robert
[jira] [Comment Edited] (JCR-4558) update Apache parent pom to version 23
[ https://issues.apache.org/jira/browse/JCR-4558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17105191#comment-17105191 ] Julian Reschke edited comment on JCR-4558 at 8/25/20, 6:23 AM: --- trunk: (2.21.1) [r1877197|http://svn.apache.org/r1877197] 2.20: (2.20.1) [r1877631|http://svn.apache.org/r1877631] 2.18: (2.18.6) [r1878614|http://svn.apache.org/r1878614] 2.16: [r1881171|http://svn.apache.org/r1881171] was (Author: reschke): trunk: (2.21.1) [r1877197|http://svn.apache.org/r1877197] 2.20: (2.20.1) [r1877631|http://svn.apache.org/r1877631] 2.18: [r1878614|http://svn.apache.org/r1878614] > update Apache parent pom to version 23 > -- > > Key: JCR-4558 > URL: https://issues.apache.org/jira/browse/JCR-4558 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: parent >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4558) update Apache parent pom to version 23
[ https://issues.apache.org/jira/browse/JCR-4558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4558: Labels: candidate_jcr_2_14 (was: candidate_jcr_2_16) > update Apache parent pom to version 23 > -- > > Key: JCR-4558 > URL: https://issues.apache.org/jira/browse/JCR-4558 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: parent >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_14 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (JCR-4558) update Apache parent pom to version 23
[ https://issues.apache.org/jira/browse/JCR-4558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-4558: Fix Version/s: 2.16.7 > update Apache parent pom to version 23 > -- > > Key: JCR-4558 > URL: https://issues.apache.org/jira/browse/JCR-4558 > Project: Jackrabbit Content Repository > Issue Type: Task > Components: parent >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Minor > Labels: candidate_jcr_2_16 > Fix For: 2.20.1, 2.22, 2.21.1, 2.18.6, 2.16.7 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (JCR-4567) Jackrabbit should build and test with Java 15
[ https://issues.apache.org/jira/browse/JCR-4567?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17183754#comment-17183754 ] Julian Reschke commented on JCR-4567: - Compiles, runs and tests with Build 36 and Jacoco disabled (mvn clean install -Dskip.coverage -PintegrationTesting) > Jackrabbit should build and test with Java 15 > - > > Key: JCR-4567 > URL: https://issues.apache.org/jira/browse/JCR-4567 > Project: Jackrabbit Content Repository > Issue Type: Task >Reporter: Julian Reschke >Assignee: Julian Reschke >Priority: Major > Fix For: 2.22 > > -- This message was sent by Atlassian Jira (v8.3.4#803005)
