Re: JUnit tests with FileDataStore

2016-01-27 Thread Tobias Bocanegra
bStore > > Have a look at snippet [1] for a possible approach > > Chetan Mehrotra > [1] https://gist.github.com/chetanmeh/6242d0a7fe421955d456 > > > On Wed, Jan 27, 2016 at 6:42 AM, Tobias Bocanegra <tri...@apache.org> wrote: >> Hi, >> >> I have some

JUnit tests with FileDataStore

2016-01-26 Thread Tobias Bocanegra
Hi, I have some tests in filevault that I want to run with the FileDataStore, but I couldn't figure out how to setup the repository correctly here [0]. I also looked at the tests in oak, but I couldn't find a valid reference. The reason for this is to test the binary references, which afaik only

Re: jackrabbit-oak build #6563: Broken

2015-10-02 Thread Tobias Bocanegra
3 > Status: Broken > > Duration: 377 seconds > Commit: 80987b8c31260bc7182189ad38cbcb793c80ca28 (trunk) > Author: Tobias Bocanegra > Message: OAK-3311 Potential NPE in syncAllExternalUsers() aborts the process > > git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@17064

Re: svn commit: r1701065 - in /jackrabbit/oak/trunk/oak-auth-ldap: ./ src/main/java/org/apache/jackrabbit/oak/security/authentication/ldap/impl/ src/test/java/org/apache/jackrabbit/oak/security/authen

2015-09-04 Thread Tobias Bocanegra
probably the MV property of 'objectclass' might have a different order of values? On Fri, Sep 4, 2015 at 8:11 AM, Davide Giannella wrote: > On 03/09/2015 18:37, bae...@apache.org wrote: >> Author: baedke >> Date: Thu Sep 3 16:37:40 2015 >> New Revision: 1701065 >> >> ... >>

Re: svn commit: r1693021 - in /jackrabbit/oak/trunk/oak-auth-external: ./ src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/ src/test/java/org/apache/jackrabbit/oak/spi

2015-07-28 Thread Tobias Bocanegra
Hi, can we keep those changes at least in trunk? I think it an important improvement. thanks. regards, toby On Tue, Jul 28, 2015 at 1:09 AM, chet...@apache.org wrote: Author: chetanm Date: Tue Jul 28 08:09:41 2015 New Revision: 1693021 URL: http://svn.apache.org/r1693021 Log: OAK-3146 -

Re: svn commit: r1685189 [1/2] - in /jackrabbit/oak/trunk: oak-auth-external/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/external/basic/ oak-auth-external/src/main/java/org/apa

2015-06-17 Thread Tobias Bocanegra
thanks for spotting I'll fix it asap. regards, toby On Wed, Jun 17, 2015 at 2:08 AM, Marcel Reutegger mreut...@adobe.com wrote: Hi, this commit breaks the build. it contains a non-apache license header: On 13/06/15 01:02, tri...@apache.org wrote: Author: tripod Date: Fri Jun 12 23:02:14

Re: [defaultsynchandler] make default sync handler more customisable (Was: [ldap sync] prepopulate a set of users)

2015-06-12 Thread Tobias Bocanegra
: Ok let’s do this, i might do the same with LdapIdentityProvider (paged search, see other thread), once i got those working, we’ll create appropriate JIRAs. Thanks, Nicolas On 14 May 2015, at 20:31, Tobias Bocanegra tri...@apache.org wrote: Hi Nicolas, On 14 May 2015 at 07:20:47

Re: [defaultsynchandler] make default sync handler more customisable (Was: [ldap sync] prepopulate a set of users)

2015-06-12 Thread Tobias Bocanegra
, Nicolas Peltier npelt...@adobe.com wrote: Ok let’s do this, i might do the same with LdapIdentityProvider (paged search, see other thread), once i got those working, we’ll create appropriate JIRAs. Thanks, Nicolas On 14 May 2015, at 20:31, Tobias Bocanegra tri...@apache.org wrote: Hi

Re: svn commit: r1680709 - in /jackrabbit/oak/trunk: oak-auth-ldap/ oak-auth-ldap/src/main/java/org/apache/jackrabbit/oak/security/authentication/ldap/impl/ oak-auth-ldap/src/test/java/org/apache/jack

2015-05-20 Thread Tobias Bocanegra
grr... I fix it. thanks for spotting. regards, toby On Wed, May 20, 2015 at 8:31 PM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: Hi Tobi, Some of the files have invalid license header here. On Thu, May 21, 2015 at 5:55 AM, tri...@apache.org wrote: +/** + *

Re: [osgi][auth-external] strange osgi wiring with felix bnd plugin

2015-05-15 Thread Tobias Bocanegra
Can you do a `mvn dependency:tree` to ensure that the correct artifact is used? regards, toby On Fri, May 15, 2015 at 6:02 AM, Nicolas Peltier npelt...@adobe.com wrote: Hi, after trying to add ExternalIdentityProvider’s dependency [0] to my project, i get a strange import instruction

Re: [ldap] paged search in LdapIdentityProvider.listUsers

2015-05-15 Thread Tobias Bocanegra
Hi, On Fri, May 15, 2015 at 6:59 AM, Nicolas Peltier npelt...@adobe.com wrote: Hi, using LdapIdentityProvider.listUsers i get results limited to 1000 results, i guess this is a server limitation as the total number is 10k. that might be a problem for the JMX beans functionality. can you

Re: 1.1.4 cut today

2015-01-07 Thread Tobias Bocanegra
Hi Davide, you should have waited until west-coast wakes up :-) we need to include https://issues.apache.org/jira/browse/OAK-2367 into 1.1.4 regards, toby On Wed, Jan 7, 2015 at 3:13 AM, Michael Dürig mdue...@apache.org wrote: On 7.1.15 12:08 , Davide Giannella wrote: On 07/01/2015 10:23,

Re: Handling same name siblings in repository upgrade

2014-09-02 Thread Tobias Bocanegra
hi, On Tue, Sep 2, 2014 at 8:11 AM, Michael Dürig mdue...@apache.org wrote: Hi, There was a discussion on the user list re. this [1]: When upgrading a repository that contains SNSs, those are treated according to Oak's basic same name sibling support. That is, the names of such nodes are

Re: JCR API implementation transparency

2014-08-25 Thread Tobias Bocanegra
fyi, I created https://issues.apache.org/jira/browse/OAK-2052 On Mon, Aug 25, 2014 at 10:32 PM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: On Tue, Aug 26, 2014 at 10:44 AM, Tobias Bocanegra tri...@apache.org wrote: IMO, this should work, even if the value is not a ValueImpl. In this case

Re: svn commit: r1617510 - /jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/MiscTest.java

2014-08-13 Thread Tobias Bocanegra
or use another base class...fixed problem in r1617701 On Wed, Aug 13, 2014 at 12:21 PM, Michael Dürig mdue...@apache.org wrote: On 13.8.14 11:20 , Davide Giannella wrote: On 12/08/2014 17:44, tri...@apache.org wrote: Added:

Re: Multiple oak repositories using an OSGI whiteboard

2014-07-15 Thread Tobias Bocanegra
Hi Dominique, I don't think that this is possible, since many of the OSGi services are kind of singletons. As long OSGi does not offer sandboxing, this won't be possible. I think you have better chance starting 2 oaks w/o OSGi. See the oak-run project for examples. Regards, Toby On Tue, Jul

Re: The p/ javadoc antipattern

2014-06-16 Thread Tobias Bocanegra
HTML in javadoc is sooo 1990's :-) why not: https://code.google.com/p/markdown-doclet/ regards, toby On Mon, Jun 16, 2014 at 9:29 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, [resurrecting an old thread, since it seems we still have some affected javadocs in Oak] On Wed, Apr 3,

Re: The p/ javadoc antipattern

2014-06-16 Thread Tobias Bocanegra
On Mon, Jun 16, 2014 at 12:04 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-06-16 18:29, Jukka Zitting wrote: Hi, [resurrecting an old thread, since it seems we still have some affected javadocs in Oak] On Wed, Apr 3, 2013 at 10:46 AM, Jukka Zitting jukka.zitt...@gmail.com

Re: non-space whitespace in name

2014-06-13 Thread Tobias Bocanegra
On Thu, Jun 12, 2014 at 10:55 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-06-13 02:14, Tobias Bocanegra wrote: Hi, according to [0] oak does not allow a non-space whitespace in the name. this is different than in jackrabbit. also it should be allowed based on [1]. the problem

Re: non-space whitespace in name

2014-06-13 Thread Tobias Bocanegra
On Fri, Jun 13, 2014 at 6:51 AM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-06-13 15:37, Tobias Bocanegra wrote: On Thu, Jun 12, 2014 at 10:55 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-06-13 02:14, Tobias Bocanegra wrote: Hi, according to [0] oak does not allow

non-space whitespace in name

2014-06-12 Thread Tobias Bocanegra
Hi, according to [0] oak does not allow a non-space whitespace in the name. this is different than in jackrabbit. also it should be allowed based on [1]. the problem at hand is, that we have content with 'no-break-space' chars in node names, that doesn't install in oak anymore. regards, toby

Re: How to get ContentRepository ?

2014-04-10 Thread Tobias Bocanegra
fyi: https://issues.apache.org/jira/browse/OAK-1721 On Wed, Apr 9, 2014 at 10:42 PM, Tobias Bocanegra tri...@apache.org wrote: Hi, for [0] I need to login to the content repository - but I don't know how to acquire it. it seems that it is neither registered as OSGi service, nor in the global

Re: How to get ContentRepository ?

2014-04-10 Thread Tobias Bocanegra
Hi, On Thu, Apr 10, 2014 at 10:15 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Thu, Apr 10, 2014 at 1:42 AM, Tobias Bocanegra tri...@apache.org wrote: for [0] I need to login to the content repository - but I don't know how to acquire it. @Reference private Repository

Re: Login with userid that contains windows domain

2014-04-09 Thread Tobias Bocanegra
On 07/04/14 20:26, Tobias Bocanegra tri...@apache.org wrote: Hi, I have an issue where the user tries to login using credentials that include a windows domain in the userid attribute. for example: MYDOMAIN\toby. I'm not sure which layer should handle the domain part correctly, and I

Re: Login with userid that contains windows domain

2014-04-09 Thread Tobias Bocanegra
? regards, toby On Wed, Apr 9, 2014 at 12:14 AM, Felix Meschberger fmesc...@adobe.com wrote: Hi Am 09.04.2014 um 09:09 schrieb Tobias Bocanegra tri...@apache.org: we could solve this transparently for all login modules that extend from AbstractLoginModule with a general processCredentials() method

How to get ContentRepository ?

2014-04-09 Thread Tobias Bocanegra
Hi, for [0] I need to login to the content repository - but I don't know how to acquire it. it seems that it is neither registered as OSGi service, nor in the global whiteboard (if there would be one). so basically I need to do: ContentSession session = contentRepository.login(...); Root

Re: Login with userid that contains windows domain

2014-04-08 Thread Tobias Bocanegra
domain-SimpleCredentials, we can easily enhance the SSOAuthenticationHandler and ExternalLoginModule after 1.0 to fully support different domains/IdentityProviders during repository login. would that make sense to you? kind regards angela On 07/04/14 20:26, Tobias Bocanegra tri

Login with userid that contains windows domain

2014-04-07 Thread Tobias Bocanegra
Hi, I have an issue where the user tries to login using credentials that include a windows domain in the userid attribute. for example: MYDOMAIN\toby. I'm not sure which layer should handle the domain part correctly, and I think it really depends on the setup. also, I'm not an AD expert and I

Re: svn commit: r1584387 - /jackrabbit/oak/trunk/RELEASE-NOTES.txt

2014-04-03 Thread Tobias Bocanegra
this makes no sense: +Jackrabbit Oak 0.20.0 is to alpha-level software. Use at your own risk. should it read: Jackrabbit Oak 0.20.0 is alpha-level software. Use at your own risk. Jackrabbit Oak 0.20.0 is only alpha-level software. Use at your own risk. Jackrabbit Oak 0.20.0 is still

Re: svn commit: r1584387 - /jackrabbit/oak/trunk/RELEASE-NOTES.txt

2014-04-03 Thread Tobias Bocanegra
'500 internal error' errors, now I can't even log into Nexus to deploy the artifacts for the release. ouchtime to call it a day :-) regards, t On Thu, Apr 3, 2014 at 11:31 PM, Tobias Bocanegra tri...@apache.org wrote: this makes no sense: +Jackrabbit Oak 0.20.0 is to alpha-level

Names with trailing spaces

2014-03-26 Thread Tobias Bocanegra
Hi, I just encountered, that it is possible in oak to create nodes with trailing spaces, which is not allowed in Jackrabbit. see https://issues.apache.org/jira/browse/OAK-1624 I'm not sure where to put this kind of tests, as the PathParserTest actually covers those cases. FWIW, the JCR spec

Re: svn commit: r1578129 - /jackrabbit/oak/trunk/oak-core/src/test/java/org/apache/jackrabbit/oak/AbstractSecurityTest.java

2014-03-17 Thread Tobias Bocanegra
ok, fair enough. but driving the test as close to a productive system is important. we can't just disable some of validators in order to make the tests pass... regards, toby On Mon, Mar 17, 2014 at 2:39 AM, Michael Dürig mdue...@apache.org wrote: Hi, I reverted these changes at

Re: concurrent creation of users

2014-03-16 Thread Tobias Bocanegra
Hi, On Sat, Mar 15, 2014 at 8:02 AM, Michael Dürig mdue...@apache.org wrote: Ah I see. The respective validators are missing from the test setup. But maybe this was done intentionally? I can't really tell. However If I add the and run the test I get stack traces that resemble more what I

Build failing w/o rebuilding jackrabbit-2.8-SNAPSHOT

2014-03-16 Thread Tobias Bocanegra
Hi, the build currently fails for me: [ERROR] Failed to execute goal org.apache.maven.plugins:maven-remote-resources-plugin:1.4:process (default) on project oak-core: Failed to resolve dependencies for one or more projects in the reactor. Reason: Unable to get dependency information for

Re: concurrent creation of users

2014-03-14 Thread Tobias Bocanegra
could take a look at this. thanks. regards, toby On Thu, Mar 13, 2014 at 5:06 PM, Tobias Bocanegra tri...@apache.org wrote: Hi, I tried to create users concurrently, and I get a constraint violation: Cannot create user/group: Intermediate folders must be of type rep:AuthorizableFolder

Re: concurrent creation of users

2014-03-14 Thread Tobias Bocanegra
Hi, On Fri, Mar 14, 2014 at 2:43 PM, Michael Dürig mdue...@apache.org wrote: On 14.3.14 1:06 , Tobias Bocanegra wrote: Hi, I tried to create users concurrently, and I get a constraint violation: Cannot create user/group: Intermediate folders must be of type rep:AuthorizableFolder

concurrent creation of users

2014-03-13 Thread Tobias Bocanegra
Hi, I tried to create users concurrently, and I get a constraint violation: Cannot create user/group: Intermediate folders must be of type rep:AuthorizableFolder. on the addExistingNode parent, because the User validator traverses up the following tree:

Re: Using other JVM supported language like Groovy for testcase

2014-03-13 Thread Tobias Bocanegra
Hi, On Thu, Mar 13, 2014 at 9:37 PM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: Just testing the waters here :) I need to write couple of integration testcase related to checking OSGi configuration support (OAK-1502) in oak-pojosr module. It would be much much more faster and

Re: svn commit: r1575050 - in /jackrabbit/oak/trunk: oak-core/src/main/java/org/apache/jackrabbit/oak/stats/ oak-jcr/src/main/java/org/apache/jackrabbit/oak/jcr/delegate/ oak-jcr/src/main/java/org/apa

2014-03-07 Thread Tobias Bocanegra
Hi, On Thu, Mar 6, 2014 at 11:08 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-03-06 23:30, Tobias Bocanegra wrote: I think you need to use a higher clock-drift interval. IIUC, you currently use 1 second. but on some machines, the System.getTimeMillis() can be as inaccurate than 2

Re: Index definition with unregistered namespace

2014-03-06 Thread Tobias Bocanegra
Hi, On Thu, Mar 6, 2014 at 1:00 AM, Davide Giannella giannella.dav...@gmail.com wrote: On 05/03/2014 23:52, Tobias Bocanegra wrote: ... the index was created, but then later, accessing the index node through JCR failed. I wanted to create a test and an issue, but have difficulties to find

Re: svn commit: r1575050 - in /jackrabbit/oak/trunk: oak-core/src/main/java/org/apache/jackrabbit/oak/stats/ oak-jcr/src/main/java/org/apache/jackrabbit/oak/jcr/delegate/ oak-jcr/src/main/java/org/apa

2014-03-06 Thread Tobias Bocanegra
Hi, I think you need to use a higher clock-drift interval. IIUC, you currently use 1 second. but on some machines, the System.getTimeMillis() can be as inaccurate than 2 seconds. however, since a long can hold up to more than 200 years of nano-seconds, I don't think we need an accurate system

Re: buildbot failure in ASF Buildbot on oak-trunk

2014-03-06 Thread Tobias Bocanegra
I don't think that was caused by my change. regards Toby On Thursday, March 6, 2014, build...@apache.org wrote: The Buildbot has detected a new failure on builder oak-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/oak-trunk/builds/4605

Re: permission store rep:modCount

2014-03-05 Thread Tobias Bocanegra
Hi, I looked at the problem again. Removing the mod-count improves concurrency when writing ACLs a lot (about 2 times faster with mongo and 20 threads). the read-performance does not suffer much with the current tests - but then the tests might not be accurate. the permission cache is only used

Re: permission store rep:modCount

2014-03-05 Thread Tobias Bocanegra
Hi, I created a test that created a node structure with 10k node, each having 1 ACL and 1 ACE for the everyone principle. then, with concurrent reader sessions, I read the nodes randomly. Benchmarks: ConcurrentEveryoneACLTest (oak 0.19-SNAPSHOT with everyone cache) Fixtures: Oak-Tar Runtime: 5

why do we index 'rep%3AGrantACE' ?

2014-03-04 Thread Tobias Bocanegra
Hi, I played around with concurrent ACL updates with (Oak-Mongo) and I saw commit errors like: aused by: org.apache.jackrabbit.mk.api.MicroKernelException: The node 6:/oak:index/nodetype/:index/rep%3AGrantACE/test68fa4877/node75 was already added in revision which brings the question, why we

Re: permission store rep:modCount

2014-02-27 Thread Tobias Bocanegra
Hi, On Thu, Feb 27, 2014 at 1:02 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Tue, Feb 25, 2014 at 2:35 AM, Angela Schreiber anch...@adobe.com wrote: i tried this out last year and it was terribly slow. We were too busy at the time to dig deeper, but I'm still surprised about

Re: permission store rep:modCount

2014-02-24 Thread Tobias Bocanegra
Hi, On Mon, Feb 24, 2014 at 2:17 AM, Marcel Reutegger mreut...@adobe.com wrote: so what the cache does, it checks if the memory representation is still on par with the one in the store by comparing the mod-count. if there is another way to do this, I'm more than happy to know. the main

Re: permission store rep:modCount

2014-02-24 Thread Tobias Bocanegra
Hi, On Mon, Feb 24, 2014 at 11:46 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 24, 2014 at 1:27 PM, Tobias Bocanegra tri...@apache.org wrote: or we once again think of a better/faster strategy to collect the ACLs and abandon the permission store idea. FWIW, I still think

Re: [VOTE] Release Apache Jackrabbit Oak 0.17

2014-02-20 Thread Tobias Bocanegra
On Thu, Feb 20, 2014 at 5:07 AM, Alex Parvulescu alexparvule...@apache.org wrote: sorry for the delay. The release has obviously failed. I plan on releasing a new '17a' later today with the current trunk. why 0.17a and not 0.17.1 or 0.18 ? regards, toby thanks, alex On Tue, Feb 18,

Re: permission store rep:modCount

2014-02-19 Thread Tobias Bocanegra
Hi Marcel, On Wed, Feb 19, 2014 at 8:45 AM, Marcel Reutegger mreut...@adobe.com wrote: I ran into a case where multiple sessions on different cluster nodes create access control entries for the same principal. admittedly, this was done in a test and may not be too likely reality, but it showed

Re: Efficient import of binary data into Oak

2014-02-18 Thread Tobias Bocanegra
hi, In CRX we solved this problem with CRX providing the blob factory, i.e. CRX already creates the appropriate structures for exactly the upload case, the multipart handler then just uses the blob for writing the output, too. Unfortunately we never got this into the JCR spec (IIRC). Also,

Re: [VOTE] Release Apache Jackrabbit Oak 0.17

2014-02-18 Thread Tobias Bocanegra
Hi, On Tue, Feb 18, 2014 at 1:25 PM, Michael Dürig mdue...@apache.org wrote: The check fails for me due to a missing license header: Unapproved licenses:

Re: Make Whiteboard accessible through ContentRepository

2014-02-13 Thread Tobias Bocanegra
hi, On Thursday, February 13, 2014, Chetan Mehrotra chetan.mehro...@gmail.com wrote: On Thu, Feb 13, 2014 at 12:45 PM, Tobias Bocanegra tri...@apache.orgjavascript:; wrote: I don't quite follow. can you give an example of what would be in the jaas.conf and where you instantiate

Re: Make Whiteboard accessible through ContentRepository

2014-02-13 Thread Tobias Bocanegra
Hi, On Thu, Feb 13, 2014 at 8:34 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Wed, Feb 12, 2014 at 10:15 AM, Tobias Bocanegra tri...@apache.org wrote: But this LoginBackend is in the end something similar like a specialized ServiceRegistry. So why not use the whiteboard instead

Use LoginModuleProxy (was: Make Whiteboard accessible through ContentRepository)

2014-02-13 Thread Tobias Bocanegra
Hi, On Thu, Feb 13, 2014 at 8:55 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Thu, Feb 13, 2014 at 4:11 AM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: Note here I preferred using the callback to get LM access the outer layer services instead of using a custom config. The

Use LoginModuleProxy (was: Make Whiteboard accessible through ContentRepository)

2014-02-13 Thread Tobias Bocanegra
Hi, On Thu, Feb 13, 2014 at 1:11 AM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: On Thu, Feb 13, 2014 at 12:45 PM, Tobias Bocanegra tri...@apache.org wrote: I don't quite follow. can you give an example of what would be in the jaas.conf and where you instantiate the ProxyLoginModule

Re: Pushing specific nodetype in oak

2014-02-13 Thread Tobias Bocanegra
Hi Davide, On Thu, Feb 13, 2014 at 2:48 AM, Davide Giannella giannella.dav...@gmail.com wrote: On 13/02/2014 10:22, Davide Giannella wrote: ... It will fire an http servlet from which I can post JSON payload for creating nodes but it manages all the nodes as String. Sorry my bad. Wrong

Re: Make Whiteboard accessible through ContentRepository

2014-02-12 Thread Tobias Bocanegra
Hi, On Wed, Feb 12, 2014 at 2:00 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Wed, Feb 12, 2014 at 1:37 AM, Tobias Bocanegra tri...@apache.org wrote: On Tue, Feb 11, 2014 at 4:38 PM, Tobias Bocanegra tri...@apache.org wrote: but then, why does the Whiteboard interface has a register

Re: Make Whiteboard accessible through ContentRepository

2014-02-12 Thread Tobias Bocanegra
12, 2014 at 12:07 PM, Tobias Bocanegra tri...@apache.org wrote: Hi, On Tue, Feb 11, 2014 at 4:38 PM, Tobias Bocanegra tri...@apache.org wrote: On Tue, Feb 11, 2014 at 1:59 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 10, 2014 at 2:25 AM, Felix Meschberger fmesc...@adobe.com

Re: Make Whiteboard accessible through ContentRepository

2014-02-12 Thread Tobias Bocanegra
Registry frequently is not performant. So a frequent operation like Login which triggers frequent lookups would cause issues and something which can be avoided good point. regards, Toby On Wed, Feb 12, 2014 at 9:01 PM, Tobias Bocanegra tri...@apache.org wrote: Hi, On Tue, Feb 11, 2014 at 11:56

Re: Failure in compile trunk

2014-02-11 Thread Tobias Bocanegra
Hi, On Tue, Feb 11, 2014 at 5:15 AM, Angela Schreiber anch...@adobe.com wrote: in this case i would suggest that we remove the workaround and just disable the broken module util we have a regular release of the felix bundle by end of this week... that would be perfectly fine IMO. +1 I'll

Re: Make Whiteboard accessible through ContentRepository

2014-02-11 Thread Tobias Bocanegra
Hi, On Tue, Feb 11, 2014 at 1:14 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 10, 2014 at 8:35 PM, Tobias Bocanegra tri...@apache.org wrote: I'd rather offer it via a Callback. Callbacks are not really meant for such use. Their purpose is to allow the authentication component

Re: Make Whiteboard accessible through ContentRepository

2014-02-11 Thread Tobias Bocanegra
Hi, On Tue, Feb 11, 2014 at 1:48 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Tue, Feb 11, 2014 at 11:59 AM, Tobias Bocanegra tri...@apache.org wrote: True, but if we want to write LoginModules what work in both worlds, then we need to offer a common interface to access to services

Re: Make Whiteboard accessible through ContentRepository

2014-02-11 Thread Tobias Bocanegra
Hi, On Tue, Feb 11, 2014 at 1:59 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 10, 2014 at 2:25 AM, Felix Meschberger fmesc...@adobe.com wrote: This thread indeed raises the question, why Oak has to come up with something (the Whiteboard) that is almost but not quite like OSGi

Re: Make Whiteboard accessible through ContentRepository

2014-02-10 Thread Tobias Bocanegra
Hi, On Mon, Feb 10, 2014 at 4:31 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 10, 2014 at 1:01 AM, Tobias Bocanegra tri...@apache.org wrote: ok...using Sling/Felix quite a lot, I'm used to the possibility to create a Service that can have references to any other exported

Re: Make Whiteboard accessible through ContentRepository

2014-02-10 Thread Tobias Bocanegra
Hi, On Mon, Feb 10, 2014 at 1:30 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: On Mon, Feb 10, 2014 at 2:50 PM, Tobias Bocanegra tri...@apache.org wrote: in case of the LoginModules, that's not possible. But accessing the whiteboard is? I don't see what's special about the whiteboard

Re: Make Whiteboard accessible through ContentRepository

2014-02-09 Thread Tobias Bocanegra
Hi, On Sun, Feb 9, 2014 at 9:40 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Sat, Feb 8, 2014 at 1:58 PM, Tobias Bocanegra tri...@apache.org wrote: ok, then what we need it the pendant to the OSGi service registry, [...] s/the pendant/a dependency/? I'm not sure I understood

Re: Make Whiteboard accessible through ContentRepository

2014-02-09 Thread Tobias Bocanegra
On Sun, Feb 9, 2014 at 9:49 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Sun, Feb 9, 2014 at 4:05 AM, Davide Giannella giannella.dav...@gmail.com wrote: It would make for example a lot easier to inject a CommitHook like a custom index. So far the only way to achieve so is to

Re: Make Whiteboard accessible through ContentRepository

2014-02-08 Thread Tobias Bocanegra
Hi, On Sat, Feb 8, 2014 at 7:26 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Sat, Feb 8, 2014 at 2:42 AM, Tobias Bocanegra tri...@apache.org wrote: currently there is not way to access the whiteboard from within the content repository - only if it's added from the outside

Make Whiteboard accessible through ContentRepository

2014-02-07 Thread Tobias Bocanegra
Hi, currently there is not way to access the whiteboard from within the content repository - only if it's added from the outside to the plugins. For example, I would need access to it from within a LoginModule. Right now, I got a private whiteboard just for the security provider, but this is not

Re: Securing Workspace#copy

2014-02-05 Thread Tobias Bocanegra
On Wed, Feb 5, 2014 at 10:49 AM, Angela Schreiber anch...@adobe.com wrote: hi jukka i can live with that as well what do others think? I like the idea, too. regards, toby kind regards angela On 05/02/14 19:35, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Wed, Feb 5, 2014 at

Re: svn commit: r1561925 - /jackrabbit/oak/tags/jackrabbit-oak-core-0.15.2/

2014-01-28 Thread Tobias Bocanegra
. I could have done it in my private fork, but didn't. As soon as 0.16 is released, I delete the tag again. regards, toby best, alex On Tue, Jan 28, 2014 at 6:26 AM, Tobias Bocanegra tri...@apache.org wrote: Hi, On Mon, Jan 27, 2014 at 9:08 PM, tri...@apache.org wrote: creating tag

Separating API/SPI in different bundles (was: svn commit: r1561926 - /jackrabbit/oak/tags/jackrabbit-oak-core-0.15.2/pom.xml)

2014-01-28 Thread Tobias Bocanegra
Hi, On Tue, Jan 28, 2014 at 1:54 AM, Chetan Mehrotra chetan.mehro...@gmail.com wrote: On Tue, Jan 28, 2014 at 7:41 AM, tri...@apache.org wrote: + org.apache.jackrabbit.oak;version=0.15.0, + org.apache.jackrabbit.oak.api;version=0.15.0, +

Re: svn commit: r1561925 - /jackrabbit/oak/tags/jackrabbit-oak-core-0.15.2/

2014-01-28 Thread Tobias Bocanegra
On Tue, Jan 28, 2014 at 11:32 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Tue, Jan 28, 2014 at 2:20 PM, Tobias Bocanegra tri...@apache.org wrote: as i mentioned before. it's not a branch nor a tag of an official release, but merely a place to record that I intended to use a 0.15.2

Re: [VOTE] Release Apache Jackrabbit Oak 0.15

2014-01-22 Thread Tobias Bocanegra
* checksum correct * did build and executed all tests successfully +1 Release this package as Apache Jackrabbit Oak 0.15 On Wed, Jan 22, 2014 at 5:37 AM, Thomas Mueller muel...@adobe.com wrote: +1 Release this package as Apache Jackrabbit Oak 0.15 The build and all tests passed. Regards,

Why is oak-run not deployed?

2014-01-21 Thread Tobias Bocanegra
Hi, why is oak-run not deployed? it would be very convenient for external module to use for integration testing. or is there another way? thanks. regards, toby

Re: svn commit: r1556370 - in /jackrabbit/oak/trunk: oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/ oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/pe

2014-01-08 Thread Tobias Bocanegra
I created https://issues.apache.org/jira/browse/OAK-1311 and start working on it asap (==now) regards, toby On Wed, Jan 8, 2014 at 10:54 AM, Tobias Bocanegra tri...@adobe.com wrote: Hi, also, I think you removed some optimizations we did for the permission evaluation (which are not directly

Re: Access control test failures (Was: Release Apache Jackrabbit Oak 0.14)

2014-01-08 Thread Tobias Bocanegra
Hi, I can't reproduce the error on my box - it's probably too fast :-) however, I try to run the tests in a windows 7 VM, but here I get other errors, like: Failed tests: concurrentObservers(org.apache.jackrabbit.oak.spi.commit.BackgroundObserverTest) Tests in error:

Re: Access control test failures (Was: Release Apache Jackrabbit Oak 0.14)

2014-01-08 Thread Tobias Bocanegra
On Wed, Jan 8, 2014 at 2:36 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-01-08 23:30, Tobias Bocanegra wrote: Hi, I can't reproduce the error on my box - it's probably too fast :-) Not likely :-) Maybe it has to do with the number of actual cores, I have 8. the OS threading

Re: Access control test failures (Was: Release Apache Jackrabbit Oak 0.14)

2014-01-08 Thread Tobias Bocanegra
be. no observation, no timing involvedmaybe a hashcode issue. I will disable the cache and work on it tomorrow. regards, toby On Wed, Jan 8, 2014 at 2:52 PM, Tobias Bocanegra tri...@apache.org wrote: On Wed, Jan 8, 2014 at 2:36 PM, Julian Reschke julian.resc...@gmx.de wrote: On 2014-01-08

ORDER BY

2013-12-12 Thread Tobias Bocanegra
Hi, what would be needed to implement a subset of OAK-1263, so that it supports OrderBy queries for well defined property types? Thomas suggested that we mandate that all index keys are mandated, also for the NodeStore. WDYT? regards, toby

Re: ORDER BY

2013-12-12 Thread Tobias Bocanegra
On Thu, Dec 12, 2013 at 9:41 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Thu, Dec 12, 2013 at 12:13 PM, Tobias Bocanegra tri...@apache.org wrote: what would be needed to implement a subset of OAK-1263, so that it supports OrderBy queries for well defined property types? First

Re: DocumentStore.query limit parameter

2013-12-11 Thread Tobias Bocanegra
yes it does. to limit the amount of returned entries. I assume the 'limit' parameter here is just a safeguard against OOME. otherwise a (range)iterator would make more sense as return value. if you want pagination you would also need an offset parameter. regards, toby On Wed, Dec 11, 2013 at

Re: SPI vs non-SPI

2013-12-02 Thread Tobias Bocanegra
...@gmail.com wrote: Hi, On Fri, Nov 29, 2013 at 6:05 AM, Tobias Bocanegra tri...@apache.org wrote: is the SPI meant to be the PI for plugins and extensibility? Yes. The idea is for Oak extension points to be defined as interfaces below o.a.j.oak.spi. Also related utility classes are kept

Helper classes in API

2013-11-29 Thread Tobias Bocanegra
Hi, I don't think we should have concrete classes in the org.apache.jackrabbit.oak.api package, unless they are needed in the API interfaces itself (like the final Type class or the *exceptions). In this sense, I'd like to move the AbstractPropertyState elsewhere. I created [0] for that.

SPI vs non-SPI

2013-11-29 Thread Tobias Bocanegra
Hi, what is exactly the distinction between SPI and non-SPI classes? i.e. classes below oajo.spi.* and those outside? is the SPI meant to be the PI for plugins and extensibility? If so, the SPI should contain all those classes that are: 1. public (in the osgi sense) 2. used to implement/extends

Re: jackrabbit-oak build #2805: Broken

2013-11-28 Thread Tobias Bocanegra
: c36307f6ceabeb4d72acbaa9e320b21d95f846cb (trunk) Author: Tobias Bocanegra Message: OAK-1222 Migration of Group Members stored in tree structure - refactor upgrade tests to get better test reports - add group editor to manage migration of group memebers - make logic in GroupMemembershipProvider reusable by upgrade

Re: Migration without an embedded Jackrabbit

2013-11-26 Thread Tobias Bocanegra
: Hi, On Mon, Oct 14, 2013 at 1:20 PM, Tobias Bocanegra tri...@adobe.com wrote: I second Felix' comments and prefer a standalone upgrade tool. this does not mean that an upgrade is always a manual step. the embedding application (e.g. Sling) can still contain the tool and auto-upgrade

Re: svn commit: r1545647 - in /jackrabbit/oak/trunk/oak-jcr/src: main/java/org/apache/jackrabbit/oak/jcr/session/NodeImpl.java test/java/org/apache/jackrabbit/oak/jcr/RepositoryTest.java

2013-11-26 Thread Tobias Bocanegra
On Tue, Nov 26, 2013 at 5:54 AM, Michael Dürig mdue...@apache.org wrote: On 26.11.13 2:17 , tri...@apache.org wrote: Author: tripod Date: Tue Nov 26 13:17:34 2013 New Revision: 1545647 URL:http://svn.apache.org/r1545647 Log: OAK-1227 Node.hasNode(foo[2]) must not throw

SNS support question

2013-11-20 Thread Tobias Bocanegra
Hi, when I do: Session.getNode(/foo/bar[2]); I get: javax.jcr.RepositoryException: Invalid name or path: /foo/bar[2] but I think this should be ItemNotFound (if the item does not exist), irrespective of SNS support or not. WDYT? Regards, Toby

Re: jackrabbit-oak build #2689: Broken

2013-11-15 Thread Tobias Bocanegra
sorry. I'm on it On Fri, Nov 15, 2013 at 4:14 PM, Travis CI ju...@apache.org wrote: Build Update for apache/jackrabbit-oak - Build: #2689 Status: Broken Duration: 1202 seconds Commit: 403dcd8dcc3c8cb8b4f672e20a2fd374e6f348d7 (trunk) Author: Tobias

Re: Security Concerns wrt Index Definitions

2013-11-13 Thread Tobias Bocanegra
I suggest to use proper nodetypes for index definitions and I second Angela's opinion, that for internal structures, we should be more rigid. I quickly browsed through the code, and I could not find any mixin type that would allow adding a oak:index node. so how would you define an index on an

Re: Security Concerns wrt Index Definitions

2013-11-13 Thread Tobias Bocanegra
Hi, On Wed, Nov 13, 2013 at 11:08 AM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Wed, Nov 13, 2013 at 12:41 PM, Tobias Bocanegra tri...@apache.org wrote: I quickly browsed through the code, and I could not find any mixin type that would allow adding a oak:index node. so how would

Re: jackrabbit-oak build #2642: Broken

2013-11-12 Thread Tobias Bocanegra
(trunk) Author: Tobias Bocanegra Message: @trivial move docu to docu git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@1541264 13f79535-47bb-0310-9956-ffa450edef68 View the changeset: https://github.com/apache/jackrabbit-oak/compare/3e7457f0cffb...9dfd88e8593f View

Node.isModified()

2013-11-12 Thread Tobias Bocanegra
Hi, I have noticed that when using Adobe's CRX explorer on Oak, using a non-admin session, some of the nodes are marked as modified - even for a fresh session. compare the 2 screenshots. first is with admin session, 2nd without.

Re: svn commit: r1539937 - in /jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security: README.md package-info.java

2013-11-08 Thread Tobias Bocanegra
sure...so far the oak doc only shows highlevel documents, so I though its better in the javadoc section. it's in markdown, because I hate writing HTML :-) but I can move it. no problem. regards, toby On Fri, Nov 8, 2013 at 1:55 AM, Angela Schreiber anch...@adobe.com wrote: agree... that should

Re: [oak] ACL cache performance

2013-11-04 Thread Tobias Bocanegra
angela On 11/1/13 8:43 AM, Tobias Bocanegra tri...@adobe.com wrote: Hi, I quickly tested the ACL performance again using the ManyUserReadTest. The tests consists of reading 10k items from a 120k item repository which has an ACL set on every 10th node. Each tests uses a different user (1

Re: [oak] ACL cache performance

2013-11-04 Thread Tobias Bocanegra
, 3238, 3425, 88 Jackrabbit , 50, 1305, 1691, 10351, 10852, 11269, 61 On Mon, Nov 4, 2013 at 2:01 AM, Tobias Bocanegra tri...@apache.org wrote: On Monday, November 4, 2013, Angela Schreiber wrote: hi thanks for the figures and the effort. btw

Re: svn commit: r1537553 - in /jackrabbit/oak/trunk: oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/accesscontrol/ oak-core/src/main/java/org/apache/jackrabbit/oak/spi/securit

2013-10-31 Thread Tobias Bocanegra
Hi, --- jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/spi/security/authorization/accesscontrol/ImmutableACL.java (original) +++ jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/spi/security/authorization/accesscontrol/ImmutableACL.java Thu

Re: Versionable paths

2013-10-31 Thread Tobias Bocanegra
On Thu, Oct 31, 2013 at 3:27 PM, Jukka Zitting jukka.zitt...@gmail.com wrote: Hi, On Thu, Oct 31, 2013 at 1:36 PM, Tobias Bocanegra tri...@apache.org wrote: No, this is not the issue. The main problem of the versioning is, that the versionable path is not recorded when creating a version

  1   2   >