[ 
https://issues.apache.org/jira/browse/JCR-2446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

angela resolved JCR-2446.
-------------------------

    Resolution: Won't Fix

when working on the jsr 283 security implementation we discussed this multiple 
times at day
and we came to the conclusion that privileges that have no meaning to the 
repository should
not be registered and evaluated by the repository itself.

for this reason we deliberately didn't allow for privilege registration.
resolving won't fix.

> Allow for the registration of custom privileges.
> ------------------------------------------------
>
>                 Key: JCR-2446
>                 URL: https://issues.apache.org/jira/browse/JCR-2446
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core, security
>    Affects Versions: 1.6.0
>            Reporter: Mat Lowery
>
> I would like for Jackrabbit to be able to write and read a custom privilege.  
> In this case, the privilege I want to add represents the right to execute a 
> file.  While this privilege means nothing to Jackrabbit, I can use it in the 
> "execution engine" of my app to allow or deny the execution.
> Here are some related issues:
> * PrivilegeRegistry is accessed statically in some parts of the code.  This 
> might need to change if PrivilegeRegistry is pluggable.
> * PrivilegeRegistry.ALL is the result of ORing all known bits.  Why not make 
> this -1 (all bits enabled) to future-proof this constant?

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to