[jira] [Comment Edited] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-03 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16921777#comment-16921777
 ] 

Alexei Krainiouk edited comment on JCRVLT-359 at 9/4/19 12:20 AM:
--

[~tripod] Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

As far as I understand for CUG case 
[MERGE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L65]
 and 
[MERGE_PRESERVE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L97]
 are essentially the same. I.E. in both cases the resulting principal list is a 
union of pre-existing principals and those that come in the package.
Please correct me if I am wrong.


was (Author: akrainiouk):
[~tripod] Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

As far as I understand for CUG case 
[AccessControlHandling.MERGE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L65]
 and 
[AccessControlHandling.MERGE_PRESERVE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L97]
 are essentially the same. I.E. in both cases the resulting principal list is a 
union of pre-existing principals and those that come in the package.
Please correct me if I am wrong.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Comment Edited] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-03 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16921777#comment-16921777
 ] 

Alexei Krainiouk edited comment on JCRVLT-359 at 9/4/19 12:19 AM:
--

[~tripod] Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

As far as I understand for CUG case 
[AccessControlHandling.MERGE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L65]
 and 
[AccessControlHandling.MERGE_PRESERVE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L97]
 are essentially the same.
Please correct me if I am wrong.
I.E. in both cases the resulting principal list is a union of pre-existing 
principals and those that come in the package.


was (Author: akrainiouk):
Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Comment Edited] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-03 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16921777#comment-16921777
 ] 

Alexei Krainiouk edited comment on JCRVLT-359 at 9/4/19 12:19 AM:
--

[~tripod] Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

As far as I understand for CUG case 
[AccessControlHandling.MERGE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L65]
 and 
[AccessControlHandling.MERGE_PRESERVE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L97]
 are essentially the same. I.E. in both cases the resulting principal list is a 
union of pre-existing principals and those that come in the package.
Please correct me if I am wrong.


was (Author: akrainiouk):
[~tripod] Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

As far as I understand for CUG case 
[AccessControlHandling.MERGE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L65]
 and 
[AccessControlHandling.MERGE_PRESERVE|https://github.com/apache/jackrabbit-filevault/blob/c6a8b816a31f3347113b8a8d4eac281faf0a6d5b/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/io/AccessControlHandling.java#L97]
 are essentially the same.
Please correct me if I am wrong.
I.E. in both cases the resulting principal list is a union of pre-existing 
principals and those that come in the package.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Commented] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-03 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16921777#comment-16921777
 ] 

Alexei Krainiouk commented on JCRVLT-359:
-

Added [unit 
tests|https://github.com/apache/jackrabbit-filevault/pull/56/commits/6fafa8afbfc4fb4d6de7262bedc7cf15f5bc30a0]
 for cugHandling.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Comment Edited] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-01 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16920522#comment-16920522
 ] 

Alexei Krainiouk edited comment on JCRVLT-359 at 9/1/19 10:39 PM:
--

[~tripod] rep:cugPolicy nodes are serialized into a package just fine. This is 
not a problem.

The problem is in de-serialization (installation) of ACL nodes, which is 
entirely controlled by aclHandling. And we need more fine grained control.

For replication we need rep:cugPolicy nodes handled differently from other ACL 
nodes and this is why separate configuration (cugHandling) option is proposed. 
For backwards compatibility when cugHandling policy is set to null (the 
default) deserialization of all ACL nodes is controlled by aclHandling as 
before.

I have created a [pull 
request|https://github.com/apache/jackrabbit-filevault/pull/56] that implements 
this idea.


was (Author: akrainiouk):
[~tripod] rep:cugPolicy nodes are serialized into a package just fine. This is 
not a problem.

The problem in de-serialization (installation), which is controlled by 
aclHandling which applies equally to all policy nodes.

For replication we need rep:cugPolicy nodes handled differently from other ACL 
nodes and this is why separate configuration (cugHandling) option is proposed. 
For backwards compatibility when cugHandling policy is set to null (the 
default) deserialization of all ACL nodes is controlled by aclHandling as 
before.

I have created a [pull 
request|https://github.com/apache/jackrabbit-filevault/pull/56] that implements 
this idea.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Commented] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-09-01 Thread Alexei Krainiouk (Jira)


[ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16920522#comment-16920522
 ] 

Alexei Krainiouk commented on JCRVLT-359:
-

[~tripod] rep:cugPolicy nodes are serialized into a package just fine. This is 
not a problem.

The problem in de-serialization (installation), which is controlled by 
aclHandling which applies equally to all policy nodes.

For replication we need rep:cugPolicy nodes handled differently from other ACL 
nodes and this is why separate configuration (cugHandling) option is proposed. 
For backwards compatibility when cugHandling policy is set to null (the 
default) deserialization of all ACL nodes is controlled by aclHandling as 
before.

I have created a [pull 
request|https://github.com/apache/jackrabbit-filevault/pull/56] that implements 
this idea.

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Updated] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-08-28 Thread Alexei Krainiouk (Jira)


 [ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Alexei Krainiouk updated JCRVLT-359:

Description: Currently handling of rep:cugPolicy nodes is controlled by 
aclHandling configuration option that equally affects ACLs and CUGs. We need to 
control them separately as for replication that is based on sling-distribution 
we need to ignore ACLs while overwriting CUGs

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>
> Currently handling of rep:cugPolicy nodes is controlled by aclHandling 
> configuration option that equally affects ACLs and CUGs. We need to control 
> them separately as for replication that is based on sling-distribution we 
> need to ignore ACLs while overwriting CUGs



--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Updated] (JCRVLT-359) Provide separate option to control handling of rep:cugPolicy nodes.

2019-08-28 Thread Alexei Krainiouk (Jira)


 [ 
https://issues.apache.org/jira/browse/JCRVLT-359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Alexei Krainiouk updated JCRVLT-359:

Summary: Provide separate option to control handling of rep:cugPolicy 
nodes.  (was: rep:cugPolicy node is ignored when aclHandling is set to "IGNORE")

> Provide separate option to control handling of rep:cugPolicy nodes.
> ---
>
> Key: JCRVLT-359
> URL: https://issues.apache.org/jira/browse/JCRVLT-359
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: vlt
>Affects Versions: 3.2.8
>Reporter: Alexei Krainiouk
>Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.3.2#803003)


[jira] [Created] (JCRVLT-359) rep:cugPolicy node is ignored when aclHandling is set to "IGNORE"

2019-08-28 Thread Alexei Krainiouk (Jira)
Alexei Krainiouk created JCRVLT-359:
---

 Summary: rep:cugPolicy node is ignored when aclHandling is set to 
"IGNORE"
 Key: JCRVLT-359
 URL: https://issues.apache.org/jira/browse/JCRVLT-359
 Project: Jackrabbit FileVault
  Issue Type: Bug
  Components: vlt
Affects Versions: 3.2.8
Reporter: Alexei Krainiouk






--
This message was sent by Atlassian Jira
(v8.3.2#803003)