[jira] [Commented] (OAK-10371) oak-segment-azure/oak-blob-cloud-azure require Guava

2023-09-05 Thread Carsten Ziegeler (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762279#comment-17762279
 ] 

Carsten Ziegeler commented on OAK-10371:


I think the SCR bnd plugin is not able to read that class due to an outdated 
class parser library. If you don't need the SCR plugin in that project, there 
is some configuration switch to disable that plugin for the maven bundle plugin

> oak-segment-azure/oak-blob-cloud-azure require Guava
> 
>
> Key: OAK-10371
> URL: https://issues.apache.org/jira/browse/OAK-10371
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Critical
> Fix For: 1.58.0
>
>
> These components require Guava due to their dependency on 
> microsoft-azure-keyvault-core. That dependency is embedded, but Guava is not.
> Choices:
> - get microsoft-azure-keyvault-core fixed not to use Guava (unlikely, but see 
> https://github.com/Azure/azure-sdk-for-java/issues/26846)
> - embed Guava
> - make sure that the OSGi import statement is as relaxed as possible (note 
> that, for historic reasons, our components for now are likely used in 
> environments using Guava 15)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10413) DocumentStoreIndexerIT hanging

2023-09-05 Thread Mohit Kataria (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762272#comment-17762272
 ] 

Mohit Kataria commented on OAK-10413:
-

Looks like this is still failing 
[https://ci-builds.apache.org/blue/organizations/jenkins/Jackrabbit%2Foak-trunk-pr/detail/PR-1094/25/pipeline]

 

> DocumentStoreIndexerIT hanging
> --
>
> Key: OAK-10413
> URL: https://issues.apache.org/jira/browse/OAK-10413
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: documentmk, run
>Reporter: Julian Reschke
>Priority: Major
>
> {noformat}
> [INFO] Running org.apache.jackrabbit.oak.index.DocumentStoreIndexerIT
> [WARNING] Corrupted STDOUT by directly writing to native stream in forked JVM 
> 1. See FAQ web page and the dump file 
> /home/jenkins/jenkins-agent/workspace/Jackrabbit/jackrabbit-oak-trunk/oak-run/target/failsafe-reports/2023-08-22T13-46-32_129-jvmRun1.dumpstream
> {noformat}
> ...and then eventually times out.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10424) Allow Fast Query Size and Insecure Facets to be selectively enabled with query options for permitted principals

2023-09-05 Thread Mark Adamcin (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mark Adamcin updated OAK-10424:
---
Description: 
Setting the global QueryEngineSettingsService.getFastQuerySize() value to true 
is currently the only way to allow service users to leverage JCR query for 
collecting accurate repository count metrics in a performant way. However, 
doing so in a multiuser repository may be inadvisable because the fast result 
size is returned to the caller without considering the caller's read 
permissions over the paths returned in the result, which may allow less 
privileged users to discover the presence of nodes that are not otherwise 
visible to them.

See [https://jackrabbit.apache.org/oak/docs/query/query-engine.html#result-size]

As an alternative to the global setting, Oak should provide a query option 
alongside [TRAVERSAL, OFFSET / LIMIT, and INDEX 
TAG|https://jackrabbit.apache.org/oak/docs/query/query-engine.html#query-options],
 such as "INSECURE RESULT SIZE" .

Similarly, IndexDefinition.SecureFacetConfiguration.MODE.INSECURE (insecure 
facets) can provide extremely valuable counts for property value distribution 
in large repositories. At the moment, it can only be defined on an index 
definition, even though it governs the facet counts at query time and has no 
effect on the persisted content of the index at all. Like fastQuerySize, Oak 
should provide a query option such as "INSECURE FACETS", for permitted system 
users to leverage insecure facets even when the query execution plan uses an 
index definition that only allows secure or statistical facet security. 

For example, 
select a.[jcr:path] from [nt:base] as a where contains(a.[text], 'Hello World') 
option(insecure result size, insecure facets, offset 10)

To address the security risk, the application should also provide a 
configuration of some kind to restrict the ability to effectively leverage this 
option to permitted system users, which could be implemented as a JCR 
repository privilege or an allowlist property in the QueryEngineSettingsService 
configuration.

I have provided a PR that adds support for an INSECURE RESULT SIZE query option 
and an INSECURE FACETS query option, as well as an "rep:insecureQueryOptions" 
repository privilege. I think the JCR privilege-based approach for 
configuration of this permission is more aligned with how system users are 
defined in practice, but this approach requires a minor version increase in the 
following oak-security-spi packages:
 * org.apache.jackrabbit.oak.spi.security.authorization.permission
 * org.apache.jackrabbit.oak.spi.security.privilege

Because all registered permissions are serialized into a long bitset, there is 
clearly a premium on adding another built-in privilege, so I figured that it 
would be better to choose a name for the privilege that would make it 
applicable to both of these new options, and any future query options that may 
involve a tradeoff between security and performance.

 

  was:
Setting the global QueryEngineSettingsService.getFastQuerySize() value to true 
is currently the only way to allow service users to leverage JCR query for 
collecting accurate repository count metrics in a performant way. However, 
doing so in a multiuser repository may be inadvisable because the fast result 
size is returned to the caller without considering the caller's read 
permissions over the paths returned in the result, which may allow less 
privileged users to discover the presence of nodes that are not otherwise 
visible to them.

See [https://jackrabbit.apache.org/oak/docs/query/query-engine.html#result-size]

As an alternative to the global setting, Oak should provide a query option 
alongside [TRAVERSAL, OFFSET / LIMIT, and INDEX 
TAG|https://jackrabbit.apache.org/oak/docs/query/query-engine.html#query-options],
 such as "INSECURE RESULTSIZE" .

Similarly, IndexDefinition.SecureFacetConfiguration.MODE.INSECURE (insecure 
facets) can provide extremely valuable counts for property value distribution 
in large repositories. At the moment, it can only be defined on an index 
definition, even though it governs the facet counts at query time and has no 
effect on the persisted content of the index at all. Like fastQuerySize, Oak 
should provide a query option such as "INSECURE FACETS", for permitted system 
users to leverage insecure facets even when the query execution plan uses an 
index definition that only allows secure or statistical facet security. 

For example, 
select a.[jcr:path] from [nt:base] as a where contains(a.[text], 'Hello World') 
option(insecure resultsize facets, offset 10)

To address the security risk, the application should also provide a 
configuration of some kind to restrict the ability to effectively leverage this 
option to permitted system users, which could be implemented as a JCR 
repository privilege or an allowlist property in the 

[jira] [Commented] (OAK-10411) Build Jackrabbit/jackrabbit-oak-1.22 #70 failed

2023-09-05 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10411?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762175#comment-17762175
 ] 

Hudson commented on OAK-10411:
--

Previously failing build now is OK.
 Passed run: [Jackrabbit/jackrabbit-oak-1.22 
#88|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/88/] 
[console 
log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/88/console]

> Build Jackrabbit/jackrabbit-oak-1.22 #70 failed
> ---
>
> Key: OAK-10411
> URL: https://issues.apache.org/jira/browse/OAK-10411
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: continuous integration
>Reporter: Hudson
>Priority: Major
>
> No description is provided
> The build Jackrabbit/jackrabbit-oak-1.22 #70 has failed.
> First failed run: [Jackrabbit/jackrabbit-oak-1.22 
> #70|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/] 
> [console 
> log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/console]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10371) oak-segment-azure/oak-blob-cloud-azure require Guava

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762163#comment-17762163
 ] 

Julian Reschke commented on OAK-10371:
--

So, tried embedding:

{noformat}
diff --git a/oak-blob-cloud-azure/pom.xml b/oak-blob-cloud-azure/pom.xml
index 6900a0fba8..c3b460363e 100644
--- a/oak-blob-cloud-azure/pom.xml
+++ b/oak-blob-cloud-azure/pom.xml
@@ -37,17 +37,14 @@
 maven-bundle-plugin
 
 
-
-${guava.osgi.import},
-*
-
 
 
org.apache.jackrabbit.oak.blob.cloud.azure.blobstorage
 
 sun.io
 
 azure-storage,
-azure-keyvault-core
+azure-keyvault-core,
+guava
 
 
 
@@ -138,6 +135,11 @@
 com.microsoft.azure
 azure-keyvault-core
 
+
+com.google.guava
+guava
+24.1.1-jre
+

 
 
{noformat}

but get...:

{noformat}
[ERROR] Manifest 
org.apache.jackrabbit:oak-blob-cloud-azure:bundle:1.57-SNAPSHOT : Got 
unexpected exception while 
analyzing:org.apache.felix.scrplugin.SCRDescriptorException: Unable to load
 compiled class: com.google.common.base.CharMatcher$Any
at 
org.apache.felix.scrplugin.helper.ClassScanner.scanSources(ClassScanner.java:156)
at 
org.apache.felix.scrplugin.SCRDescriptorGenerator.execute(SCRDescriptorGenerator.java:146)
at 
org.apache.felix.scrplugin.bnd.SCRDescriptorBndPlugin.analyzeJar(SCRDescriptorBndPlugin.java:179)
at aQute.bnd.osgi.Analyzer.doPlugins(Analyzer.java:992)
at aQute.bnd.osgi.Analyzer.analyze(Analyzer.java:208)
at aQute.bnd.osgi.Builder.analyze(Builder.java:444)
at aQute.bnd.osgi.Analyzer.calcManifest(Analyzer.java:1035)
at aQute.bnd.osgi.Builder.build(Builder.java:127)
at 
org.apache.felix.bundleplugin.ManifestPlugin.getAnalyzer(ManifestPlugin.java:321)
at 
org.apache.felix.bundleplugin.ManifestPlugin.execute(ManifestPlugin.java:125)
at 
org.apache.felix.bundleplugin.BundlePlugin.execute(BundlePlugin.java:380)

{noformat}

> oak-segment-azure/oak-blob-cloud-azure require Guava
> 
>
> Key: OAK-10371
> URL: https://issues.apache.org/jira/browse/OAK-10371
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Critical
> Fix For: 1.58.0
>
>
> These components require Guava due to their dependency on 
> microsoft-azure-keyvault-core. That dependency is embedded, but Guava is not.
> Choices:
> - get microsoft-azure-keyvault-core fixed not to use Guava (unlikely, but see 
> https://github.com/Azure/azure-sdk-for-java/issues/26846)
> - embed Guava
> - make sure that the OSGi import statement is as relaxed as possible (note 
> that, for historic reasons, our components for now are likely used in 
> environments using Guava 15)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (OAK-10431) Bump up minimal warning level for deprecated uses of java.security.Group to WARN

2023-09-05 Thread Julian Reschke (Jira)
Julian Reschke created OAK-10431:


 Summary: Bump up minimal warning level for deprecated uses of 
java.security.Group to WARN
 Key: OAK-10431
 URL: https://issues.apache.org/jira/browse/OAK-10431
 Project: Jackrabbit Oak
  Issue Type: Task
  Components: security, security-spi
Affects Versions: 1.22.16
Reporter: Julian Reschke
Assignee: Julian Reschke
 Fix For: 1.22.17






--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10431) Bump up minimal warning level for deprecated uses of java.security.Group to WARN

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10431?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10431:
-
Fix Version/s: 1.22.18
   (was: 1.22.17)

> Bump up minimal warning level for deprecated uses of java.security.Group to 
> WARN
> 
>
> Key: OAK-10431
> URL: https://issues.apache.org/jira/browse/OAK-10431
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: security, security-spi
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.22.18
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10431) Bump up minimal warning level for deprecated uses of java.security.Group to WARN

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10431?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10431:
-
Affects Version/s: (was: 1.22.16)

> Bump up minimal warning level for deprecated uses of java.security.Group to 
> WARN
> 
>
> Key: OAK-10431
> URL: https://issues.apache.org/jira/browse/OAK-10431
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: security, security-spi
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10411) Build Jackrabbit/jackrabbit-oak-1.22 #70 failed

2023-09-05 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10411?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762142#comment-17762142
 ] 

Hudson commented on OAK-10411:
--

Previously failing build now is OK.
 Passed run: [Jackrabbit/jackrabbit-oak-1.22 
#87|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/87/] 
[console 
log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/87/console]

> Build Jackrabbit/jackrabbit-oak-1.22 #70 failed
> ---
>
> Key: OAK-10411
> URL: https://issues.apache.org/jira/browse/OAK-10411
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: continuous integration
>Reporter: Hudson
>Priority: Major
>
> No description is provided
> The build Jackrabbit/jackrabbit-oak-1.22 #70 has failed.
> First failed run: [Jackrabbit/jackrabbit-oak-1.22 
> #70|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/] 
> [console 
> log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/console]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10421) Bump up minimal warning level for deprecated uses of java.security.Group to INFO

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762135#comment-17762135
 ] 

Julian Reschke commented on OAK-10421:
--

1.22: 
[d229025418|https://github.com/apache/jackrabbit-oak/commit/d229025418d27bede287b00f49425d5cec966f1d]

> Bump up minimal warning level for deprecated uses of java.security.Group to 
> INFO
> 
>
> Key: OAK-10421
> URL: https://issues.apache.org/jira/browse/OAK-10421
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: security, security-spi
>Affects Versions: 1.22.16
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (OAK-10421) Bump up minimal warning level for deprecated uses of java.security.Group to INFO

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10421?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke resolved OAK-10421.
--
Resolution: Fixed

> Bump up minimal warning level for deprecated uses of java.security.Group to 
> INFO
> 
>
> Key: OAK-10421
> URL: https://issues.apache.org/jira/browse/OAK-10421
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: security, security-spi
>Affects Versions: 1.22.16
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (OAK-10201) oak-blob-plugins: exported packages need to be marked @internal

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10201?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17715081#comment-17715081
 ] 

Julian Reschke edited comment on OAK-10201 at 9/5/23 1:20 PM:
--

trunk: (1.52) 
[2ec91f0207|https://github.com/apache/jackrabbit-oak/commit/2ec91f020791d1f17ae3b9e197b6a6c89c4dc522]
 
[2c9353c528|https://github.com/apache/jackrabbit-oak/commit/2c9353c528060e4ade211632f44fe4ff3eed10e1]
 
[838780a7aa|https://github.com/apache/jackrabbit-oak/commit/838780a7aaf9775ad0bf7b6be65c1a1619e65eb7]
 
[cb64d9a04f|https://github.com/apache/jackrabbit-oak/commit/cb64d9a04fe85c6530c18226a7b7c44498041667]
1.22: 
[fe4523c735|https://github.com/apache/jackrabbit-oak/commit/fe4523c73593c13b80a4834a5df4bf972238c953]
 
[7bd539ab61|https://github.com/apache/jackrabbit-oak/commit/7bd539ab619891981c4c2f1e3d09df8f9cac94ee]
 
[8b121ec336|https://github.com/apache/jackrabbit-oak/commit/8b121ec3368f4ed2dd7929fba49a2cddcedea3b8]
 
[95e7a077cc|https://github.com/apache/jackrabbit-oak/commit/95e7a077cce11fcb31a34c1c72c404d63d162577]



was (Author: reschke):
trunk: (1.52) 
[2ec91f0207|https://github.com/apache/jackrabbit-oak/commit/2ec91f020791d1f17ae3b9e197b6a6c89c4dc522]
 
[2c9353c528|https://github.com/apache/jackrabbit-oak/commit/2c9353c528060e4ade211632f44fe4ff3eed10e1]
 
[838780a7aa|https://github.com/apache/jackrabbit-oak/commit/838780a7aaf9775ad0bf7b6be65c1a1619e65eb7]
 
[cb64d9a04f|https://github.com/apache/jackrabbit-oak/commit/cb64d9a04fe85c6530c18226a7b7c44498041667]


> oak-blob-plugins: exported packages need to be marked @internal 
> 
>
> Key: OAK-10201
> URL: https://issues.apache.org/jira/browse/OAK-10201
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-plugins
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Blocker
> Fix For: 1.52.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10201) oak-blob-plugins: exported packages need to be marked @internal

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10201:
-
Labels:   (was: candidate_oak_1_22)

> oak-blob-plugins: exported packages need to be marked @internal 
> 
>
> Key: OAK-10201
> URL: https://issues.apache.org/jira/browse/OAK-10201
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-plugins
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Blocker
> Fix For: 1.52.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10201) oak-blob-plugins: exported packages need to be marked @internal

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10201:
-
Fix Version/s: 1.22.17

> oak-blob-plugins: exported packages need to be marked @internal 
> 
>
> Key: OAK-10201
> URL: https://issues.apache.org/jira/browse/OAK-10201
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-plugins
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Blocker
>  Labels: candidate_oak_1_22
> Fix For: 1.52.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10430) oak-*-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762084#comment-17762084
 ] 

Julian Reschke commented on OAK-10430:
--

trunk: 
[cccd6b68e9|https://github.com/apache/jackrabbit-oak/commit/cccd6b68e97c4ab99ecda7dbcd58c540d0c2985e]

> oak-*-azure: add to OSGi tests
> --
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>  Labels: candidate_oak_1_22
> Fix For: 1.58.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10411) Build Jackrabbit/jackrabbit-oak-1.22 #70 failed

2023-09-05 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10411?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762085#comment-17762085
 ] 

Hudson commented on OAK-10411:
--

Previously failing build now is OK.
 Passed run: [Jackrabbit/jackrabbit-oak-1.22 
#86|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/86/] 
[console 
log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/86/console]

> Build Jackrabbit/jackrabbit-oak-1.22 #70 failed
> ---
>
> Key: OAK-10411
> URL: https://issues.apache.org/jira/browse/OAK-10411
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: continuous integration
>Reporter: Hudson
>Priority: Major
>
> No description is provided
> The build Jackrabbit/jackrabbit-oak-1.22 #70 has failed.
> First failed run: [Jackrabbit/jackrabbit-oak-1.22 
> #70|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/] 
> [console 
> log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/console]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10430) oak-*-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10430:
-
Labels: candidate_oak_1_22  (was: )

> oak-*-azure: add to OSGi tests
> --
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>  Labels: candidate_oak_1_22
> Fix For: 1.58.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (OAK-10430) oak-*-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke resolved OAK-10430.
--
Fix Version/s: 1.58.0
   Resolution: Fixed

> oak-*-azure: add to OSGi tests
> --
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.58.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10413) DocumentStoreIndexerIT hanging

2023-09-05 Thread Marcel Reutegger (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762065#comment-17762065
 ] 

Marcel Reutegger commented on OAK-10413:


PR #1099 (including changes from OAK-10427) ran all tests successfully. I 
merged the changes into trunk. Let's wait for some more runs until we resolve 
this issue.

> DocumentStoreIndexerIT hanging
> --
>
> Key: OAK-10413
> URL: https://issues.apache.org/jira/browse/OAK-10413
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: documentmk, run
>Reporter: Julian Reschke
>Priority: Major
>
> {noformat}
> [INFO] Running org.apache.jackrabbit.oak.index.DocumentStoreIndexerIT
> [WARNING] Corrupted STDOUT by directly writing to native stream in forked JVM 
> 1. See FAQ web page and the dump file 
> /home/jenkins/jenkins-agent/workspace/Jackrabbit/jackrabbit-oak-trunk/oak-run/target/failsafe-reports/2023-08-22T13-46-32_129-jvmRun1.dumpstream
> {noformat}
> ...and then eventually times out.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (OAK-10400) auth-ldap/benchmarks: use default dependency for commons-lang3

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10400?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17754477#comment-17754477
 ] 

Julian Reschke edited comment on OAK-10400 at 9/5/23 11:14 AM:
---

trunk: (1.56.0) 
[de516dd49f|https://github.com/apache/jackrabbit-oak/commit/de516dd49f167ec6dee6133110b2ebd502c06e32]
1.22: 
[2916fcb213|https://github.com/apache/jackrabbit-oak/commit/2916fcb2132244803f3791b64e7897faa6252f6e]



was (Author: reschke):
trunk: (1.56.0) 
[de516dd49f|https://github.com/apache/jackrabbit-oak/commit/de516dd49f167ec6dee6133110b2ebd502c06e32]

> auth-ldap/benchmarks: use default dependency for commons-lang3
> --
>
> Key: OAK-10400
> URL: https://issues.apache.org/jira/browse/OAK-10400
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: auth-ldap, benchmarks
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Major
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10201) oak-blob-plugins: exported packages need to be marked @internal

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10201:
-
Summary: oak-blob-plugins: exported packages need to be marked @internal   
(was: oak-blub-plugins: exported packages need to be marked @internal )

> oak-blob-plugins: exported packages need to be marked @internal 
> 
>
> Key: OAK-10201
> URL: https://issues.apache.org/jira/browse/OAK-10201
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-plugins
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Blocker
>  Labels: candidate_oak_1_22
> Fix For: 1.52.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10400) auth-ldap/benchmarks: use default dependency for commons-lang3

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10400?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10400:
-
Labels:   (was: candidate_oak_1_22)

> auth-ldap/benchmarks: use default dependency for commons-lang3
> --
>
> Key: OAK-10400
> URL: https://issues.apache.org/jira/browse/OAK-10400
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: auth-ldap, benchmarks
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Major
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10400) auth-ldap/benchmarks: use default dependency for commons-lang3

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10400?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10400:
-
Fix Version/s: 1.22.17

> auth-ldap/benchmarks: use default dependency for commons-lang3
> --
>
> Key: OAK-10400
> URL: https://issues.apache.org/jira/browse/OAK-10400
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: auth-ldap, benchmarks
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Major
>  Labels: candidate_oak_1_22
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10411) Build Jackrabbit/jackrabbit-oak-1.22 #70 failed

2023-09-05 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10411?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762025#comment-17762025
 ] 

Hudson commented on OAK-10411:
--

Previously failing build now is OK.
 Passed run: [Jackrabbit/jackrabbit-oak-1.22 
#85|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/85/] 
[console 
log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/85/console]

> Build Jackrabbit/jackrabbit-oak-1.22 #70 failed
> ---
>
> Key: OAK-10411
> URL: https://issues.apache.org/jira/browse/OAK-10411
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: continuous integration
>Reporter: Hudson
>Priority: Major
>
> No description is provided
> The build Jackrabbit/jackrabbit-oak-1.22 #70 has failed.
> First failed run: [Jackrabbit/jackrabbit-oak-1.22 
> #70|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/] 
> [console 
> log|https://ci-builds.apache.org/job/Jackrabbit/job/jackrabbit-oak-1.22/70/console]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (OAK-10401) search-mt/solr-osgi: use default versions of commons-math3

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10401?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17754605#comment-17754605
 ] 

Julian Reschke edited comment on OAK-10401 at 9/5/23 9:54 AM:
--

trunk: (1.56.0) 
[57cd862d47|https://github.com/apache/jackrabbit-oak/commit/57cd862d47fcc9f81eecdf55381802c9c78d]
1.22: 
[14d3f5a6ad|https://github.com/apache/jackrabbit-oak/commit/14d3f5a6ad6708819f3a39010023ad71cbf063e6]



was (Author: reschke):
trunk: 
[57cd862d47|https://github.com/apache/jackrabbit-oak/commit/57cd862d47fcc9f81eecdf55381802c9c78d]

> search-mt/solr-osgi: use default versions of commons-math3
> --
>
> Key: OAK-10401
> URL: https://issues.apache.org/jira/browse/OAK-10401
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: search-mt, solr
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Trivial
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10401) search-mt/solr-osgi: use default versions of commons-math3

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10401:
-
Labels:   (was: candidate_oak_1_22)

> search-mt/solr-osgi: use default versions of commons-math3
> --
>
> Key: OAK-10401
> URL: https://issues.apache.org/jira/browse/OAK-10401
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: search-mt, solr
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Trivial
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10401) search-mt/solr-osgi: use default versions of commons-math3

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10401:
-
Fix Version/s: 1.22.17

> search-mt/solr-osgi: use default versions of commons-math3
> --
>
> Key: OAK-10401
> URL: https://issues.apache.org/jira/browse/OAK-10401
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: search-mt, solr
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Trivial
>  Labels: candidate_oak_1_22
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10430) oak-*-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10430:
-
Summary: oak-*-azure: add to OSGi tests  (was: oak-segment-azure: add to 
OSGi tests)

> oak-*-azure: add to OSGi tests
> --
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10430) oak-*-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10430:
-
Component/s: blob-cloud-azure

> oak-*-azure: add to OSGi tests
> --
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: blob-cloud-azure, it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10430) oak-segment-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10430:
-
Component/s: segment-azure

> oak-segment-azure: add to OSGi tests
> 
>
> Key: OAK-10430
> URL: https://issues.apache.org/jira/browse/OAK-10430
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: it, osgi, segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (OAK-10430) oak-segment-azure: add to OSGi tests

2023-09-05 Thread Julian Reschke (Jira)
Julian Reschke created OAK-10430:


 Summary: oak-segment-azure: add to OSGi tests
 Key: OAK-10430
 URL: https://issues.apache.org/jira/browse/OAK-10430
 Project: Jackrabbit Oak
  Issue Type: Task
  Components: it, osgi
Reporter: Julian Reschke
Assignee: Julian Reschke






--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10428) UserPrincipalProvider updates group cache on every login

2023-09-05 Thread Joerg Hoh (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762006#comment-17762006
 ] 

Joerg Hoh commented on OAK-10428:
-

Agree, the thundering herd is a problem in this case, but only for a very small 
time (probably a few miliseconds), until the first login has updated the 
timestamps on the cache. Would be hard to avoid/fix.

> UserPrincipalProvider updates group cache on every login
> 
>
> Key: OAK-10428
> URL: https://issues.apache.org/jira/browse/OAK-10428
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: authorization-principalbased
>Affects Versions: 1.56.0
>Reporter: Joerg Hoh
>Priority: Major
>
> Under traffic (by a single user) I see in a DocumentNodeStore setup this 
> stacktrace for a lot of requests:
> {noformat}
> "qtp2052801890-41390" #41390 prio=5 os_prio=0 cpu=19882.72ms elapsed=3024.20s 
> tid=0x564321465800 nid=0x3ec2a waiting on condition  [0x7f633f55f000]
>java.lang.Thread.State: WAITING (parking)
> at jdk.internal.misc.Unsafe.park(java.base@11.0.15/Native Method)
> - parking to wait for  <0x0006a0cac5f0> (a 
> java.util.concurrent.locks.ReentrantLock$NonfairSync)
> at 
> java.util.concurrent.locks.LockSupport.park(java.base@11.0.15/LockSupport.java:194)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.parkAndCheckInterrupt(java.base@11.0.15/AbstractQueuedSynchronizer.java:885)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquireQueued(java.base@11.0.15/AbstractQueuedSynchronizer.java:917)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquire(java.base@11.0.15/AbstractQueuedSynchronizer.java:1240)
> at 
> java.util.concurrent.locks.ReentrantLock.lock(java.base@11.0.15/ReentrantLock.java:267)
> at 
> org.apache.jackrabbit.oak.plugins.document.locks.StripedNodeDocumentLocks.acquire(StripedNodeDocumentLocks.java:39)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndModify(MongoDocumentStore.java:1054)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndUpdate(MongoDocumentStore.java:1610)
> at 
> org.apache.jackrabbit.oak.plugins.document.util.LeaseCheckDocumentStoreWrapper.findAndUpdate(LeaseCheckDocumentStoreWrapper.java:151)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.markCommitRoot(Collision.java:201)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.mark(Collision.java:85)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:604)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:642)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:372)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStoreWithTiming(Commit.java:278)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:262)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyInternal(Commit.java:236)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.apply(Commit.java:224)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:321)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:283)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch$InMemory.merge(DocumentNodeStoreBranch.java:553)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.merge0(DocumentNodeStoreBranch.java:197)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.merge(DocumentNodeStoreBranch.java:121)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentRootBuilder.merge(DocumentRootBuilder.java:170)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStore.merge(DocumentNodeStore.java:2067)
> at 
> org.apache.jackrabbit.oak.composite.CompositeNodeStore.merge(CompositeNodeStore.java:153)
> at 
> org.apache.jackrabbit.oak.core.MutableRoot.commit(MutableRoot.java:262)
> at 
> org.apache.jackrabbit.oak.security.user.UserPrincipalProvider.cacheGroups(UserPrincipalProvider.java:318)
> at 
> org.apache.jackrabbit.oak.security.user.UserPrincipalProvider.getGroupMembership(UserPrincipalProvider.java:290)
> at 
> org.apache.jackrabbit.oak.security.user.UserPrincipalProvider.getPrincipals(UserPrincipalProvider.java:152)
> at 
> 

[jira] [Comment Edited] (OAK-10428) UserPrincipalProvider updates group cache on every login

2023-09-05 Thread Marcel Reutegger (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17761997#comment-17761997
 ] 

Marcel Reutegger edited comment on OAK-10428 at 9/5/23 9:08 AM:


bq. In case a group membership cache is stored at the principal, some 
properties are updated on every access, and committed.

I noticed this as well in some cases, but the cache is not updated on every 
access. There is still a problematic pattern in my view. Once the cache for a 
principal reaches the end of its TTL, there is a thundering herd problem. 
Multiple requests coming in at roughly the same time will all try to update the 
cache and most of them will run into conflicts.

I think it would be better if only one thread updates the cache, while all 
other just use the slightly outdated value currently in the cache.


was (Author: mreutegg):
bq. In case a group membership cache is stored at the principal, some 
properties are updated on every access, and committed.

I noticed this as well in some cases, but the cache is not updated on every 
access. There is still a problematic pattern in my view. Once the cache for a 
principal reaches the end of its TTL, there is a thundering herd problem. 
Multiple requests coming in at roughly the same time will all try to update the 
cache and most of them will run into conflicts.

> UserPrincipalProvider updates group cache on every login
> 
>
> Key: OAK-10428
> URL: https://issues.apache.org/jira/browse/OAK-10428
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: authorization-principalbased
>Affects Versions: 1.56.0
>Reporter: Joerg Hoh
>Priority: Major
>
> Under traffic (by a single user) I see in a DocumentNodeStore setup this 
> stacktrace for a lot of requests:
> {noformat}
> "qtp2052801890-41390" #41390 prio=5 os_prio=0 cpu=19882.72ms elapsed=3024.20s 
> tid=0x564321465800 nid=0x3ec2a waiting on condition  [0x7f633f55f000]
>java.lang.Thread.State: WAITING (parking)
> at jdk.internal.misc.Unsafe.park(java.base@11.0.15/Native Method)
> - parking to wait for  <0x0006a0cac5f0> (a 
> java.util.concurrent.locks.ReentrantLock$NonfairSync)
> at 
> java.util.concurrent.locks.LockSupport.park(java.base@11.0.15/LockSupport.java:194)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.parkAndCheckInterrupt(java.base@11.0.15/AbstractQueuedSynchronizer.java:885)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquireQueued(java.base@11.0.15/AbstractQueuedSynchronizer.java:917)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquire(java.base@11.0.15/AbstractQueuedSynchronizer.java:1240)
> at 
> java.util.concurrent.locks.ReentrantLock.lock(java.base@11.0.15/ReentrantLock.java:267)
> at 
> org.apache.jackrabbit.oak.plugins.document.locks.StripedNodeDocumentLocks.acquire(StripedNodeDocumentLocks.java:39)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndModify(MongoDocumentStore.java:1054)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndUpdate(MongoDocumentStore.java:1610)
> at 
> org.apache.jackrabbit.oak.plugins.document.util.LeaseCheckDocumentStoreWrapper.findAndUpdate(LeaseCheckDocumentStoreWrapper.java:151)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.markCommitRoot(Collision.java:201)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.mark(Collision.java:85)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:604)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:642)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:372)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStoreWithTiming(Commit.java:278)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:262)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyInternal(Commit.java:236)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.apply(Commit.java:224)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:321)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:283)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch$InMemory.merge(DocumentNodeStoreBranch.java:553)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.merge0(DocumentNodeStoreBranch.java:197)
> at 
> 

[jira] [Commented] (OAK-10428) UserPrincipalProvider updates group cache on every login

2023-09-05 Thread Marcel Reutegger (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10428?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17761997#comment-17761997
 ] 

Marcel Reutegger commented on OAK-10428:


bq. In case a group membership cache is stored at the principal, some 
properties are updated on every access, and committed.

I noticed this as well in some cases, but the cache is not updated on every 
access. There is still a problematic pattern in my view. Once the cache for a 
principal reaches the end of its TTL, there is a thundering herd problem. 
Multiple requests coming in at roughly the same time will all try to update the 
cache and most of them will run into conflicts.

> UserPrincipalProvider updates group cache on every login
> 
>
> Key: OAK-10428
> URL: https://issues.apache.org/jira/browse/OAK-10428
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: authorization-principalbased
>Affects Versions: 1.56.0
>Reporter: Joerg Hoh
>Priority: Major
>
> Under traffic (by a single user) I see in a DocumentNodeStore setup this 
> stacktrace for a lot of requests:
> {noformat}
> "qtp2052801890-41390" #41390 prio=5 os_prio=0 cpu=19882.72ms elapsed=3024.20s 
> tid=0x564321465800 nid=0x3ec2a waiting on condition  [0x7f633f55f000]
>java.lang.Thread.State: WAITING (parking)
> at jdk.internal.misc.Unsafe.park(java.base@11.0.15/Native Method)
> - parking to wait for  <0x0006a0cac5f0> (a 
> java.util.concurrent.locks.ReentrantLock$NonfairSync)
> at 
> java.util.concurrent.locks.LockSupport.park(java.base@11.0.15/LockSupport.java:194)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.parkAndCheckInterrupt(java.base@11.0.15/AbstractQueuedSynchronizer.java:885)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquireQueued(java.base@11.0.15/AbstractQueuedSynchronizer.java:917)
> at 
> java.util.concurrent.locks.AbstractQueuedSynchronizer.acquire(java.base@11.0.15/AbstractQueuedSynchronizer.java:1240)
> at 
> java.util.concurrent.locks.ReentrantLock.lock(java.base@11.0.15/ReentrantLock.java:267)
> at 
> org.apache.jackrabbit.oak.plugins.document.locks.StripedNodeDocumentLocks.acquire(StripedNodeDocumentLocks.java:39)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndModify(MongoDocumentStore.java:1054)
> at 
> org.apache.jackrabbit.oak.plugins.document.mongo.MongoDocumentStore.findAndUpdate(MongoDocumentStore.java:1610)
> at 
> org.apache.jackrabbit.oak.plugins.document.util.LeaseCheckDocumentStoreWrapper.findAndUpdate(LeaseCheckDocumentStoreWrapper.java:151)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.markCommitRoot(Collision.java:201)
> at 
> org.apache.jackrabbit.oak.plugins.document.Collision.mark(Collision.java:85)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:604)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.checkConflicts(Commit.java:642)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:372)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStoreWithTiming(Commit.java:278)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyToDocumentStore(Commit.java:262)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.applyInternal(Commit.java:236)
> at 
> org.apache.jackrabbit.oak.plugins.document.Commit.apply(Commit.java:224)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:321)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.persist(DocumentNodeStoreBranch.java:283)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch$InMemory.merge(DocumentNodeStoreBranch.java:553)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.merge0(DocumentNodeStoreBranch.java:197)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStoreBranch.merge(DocumentNodeStoreBranch.java:121)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentRootBuilder.merge(DocumentRootBuilder.java:170)
> at 
> org.apache.jackrabbit.oak.plugins.document.DocumentNodeStore.merge(DocumentNodeStore.java:2067)
> at 
> org.apache.jackrabbit.oak.composite.CompositeNodeStore.merge(CompositeNodeStore.java:153)
> at 
> org.apache.jackrabbit.oak.core.MutableRoot.commit(MutableRoot.java:262)
> at 
> org.apache.jackrabbit.oak.security.user.UserPrincipalProvider.cacheGroups(UserPrincipalProvider.java:318)
> at 
> 

[jira] [Comment Edited] (OAK-10404) improve TarFilesTest.testCollectBlobReferences diagnostics

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10404?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17755026#comment-17755026
 ] 

Julian Reschke edited comment on OAK-10404 at 9/5/23 8:41 AM:
--

trunk: (1.56.0) 
[501f27c9ad|https://github.com/apache/jackrabbit-oak/commit/501f27c9ad6c5b3ef2611e20a0cc8e61f5f629d0]
1.22: 
[054526d18e|https://github.com/apache/jackrabbit-oak/commit/054526d18e907a0beb9be21ce571aea02c7d6e1b]



was (Author: reschke):
trunk: 
[501f27c9ad|https://github.com/apache/jackrabbit-oak/commit/501f27c9ad6c5b3ef2611e20a0cc8e61f5f629d0]

> improve TarFilesTest.testCollectBlobReferences diagnostics
> --
>
> Key: OAK-10404
> URL: https://issues.apache.org/jira/browse/OAK-10404
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: segment-tar
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.56.0, 1.22.17
>
>
> 1. Expected and actual value are swapped
> 2. When the test fails, report the UUIDs that were used (there is a suspicion 
> that in some cases they might not be as random as they should)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10404) improve TarFilesTest.testCollectBlobReferences diagnostics

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10404?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10404:
-
Fix Version/s: 1.22.17

> improve TarFilesTest.testCollectBlobReferences diagnostics
> --
>
> Key: OAK-10404
> URL: https://issues.apache.org/jira/browse/OAK-10404
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: segment-tar
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>  Labels: candidate_oak_1_22
> Fix For: 1.56.0, 1.22.17
>
>
> 1. Expected and actual value are swapped
> 2. When the test fails, report the UUIDs that were used (there is a suspicion 
> that in some cases they might not be as random as they should)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10404) improve TarFilesTest.testCollectBlobReferences diagnostics

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10404?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10404:
-
Labels:   (was: candidate_oak_1_22)

> improve TarFilesTest.testCollectBlobReferences diagnostics
> --
>
> Key: OAK-10404
> URL: https://issues.apache.org/jira/browse/OAK-10404
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: segment-tar
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.56.0, 1.22.17
>
>
> 1. Expected and actual value are swapped
> 2. When the test fails, report the UUIDs that were used (there is a suspicion 
> that in some cases they might not be as random as they should)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10293) AzureTarRevisionsTest fails occasionally

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17761986#comment-17761986
 ] 

Julian Reschke commented on OAK-10293:
--

Just got:

{noformat}
[ERROR] Tests run: 7, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 3.79 s 
<<< FAILURE! - in org.apache.jackrabbit.oak.segment.azure.jou
rnal.AzureTarRevisionsTest
[ERROR] 
concurrentSetHead(org.apache.jackrabbit.oak.segment.azure.journal.AzureTarRevisionsTest)
  Time elapsed: 0.544 s  <<< ERROR!
java.io.IOException: The append position condition specified was not met. 
Please see the cause for further information.
at 
com.microsoft.azure.storage.core.Utility.initIOException(Utility.java:769)
at 
com.microsoft.azure.storage.blob.BlobOutputStreamInternal.appendBlock(BlobOutputStreamInternal.java:506)
at 
com.microsoft.azure.storage.blob.BlobOutputStreamInternal.access$200(BlobOutputStreamInternal.java:47)
at 
com.microsoft.azure.storage.blob.BlobOutputStreamInternal$3.call(BlobOutputStreamInternal.java:439)
at 
com.microsoft.azure.storage.blob.BlobOutputStreamInternal$3.call(BlobOutputStreamInternal.java:436)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at 
java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at 
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at 
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)
Caused by: com.microsoft.azure.storage.StorageException: The append position 
condition specified was not met.
at 
com.microsoft.azure.storage.StorageException.translateException(StorageException.java:87)
at 
com.microsoft.azure.storage.core.StorageRequest.materializeException(StorageRequest.java:305)
at 
com.microsoft.azure.storage.core.ExecutionEngine.executeWithRetry(ExecutionEngine.java:196)
at 
com.microsoft.azure.storage.blob.CloudAppendBlob.appendBlock(CloudAppendBlob.java:405)
at 
com.microsoft.azure.storage.blob.BlobOutputStreamInternal.appendBlock(BlobOutputStreamInternal.java:486)
... 9 more

{noformat}

> AzureTarRevisionsTest fails occasionally
> 
>
> Key: OAK-10293
> URL: https://issues.apache.org/jira/browse/OAK-10293
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: segment-azure
>Reporter: Marcel Reutegger
>Assignee: Andrei Dulceanu
>Priority: Minor
>
> {noformat}
> [ERROR] Tests run: 7, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 2.395 
> s <<< FAILURE! - in 
> org.apache.jackrabbit.oak.segment.azure.journal.AzureTarRevisionsTest
> [ERROR] 
> setHeadFromFunction(org.apache.jackrabbit.oak.segment.azure.journal.AzureTarRevisionsTest)
>   Time elapsed: 0.043 s  <<< ERROR!
> org.apache.jackrabbit.oak.segment.file.InvalidFileStoreVersionException: 
> Using oak-segment-tar, but oak-segment should be used
>   at 
> org.apache.jackrabbit.oak.segment.file.ManifestChecker.openManifest(ManifestChecker.java:65)
>   at 
> org.apache.jackrabbit.oak.segment.file.ManifestChecker.checkAndUpdateManifest(ManifestChecker.java:51)
>   at 
> org.apache.jackrabbit.oak.segment.file.FileStore.(FileStore.java:153)
>   at 
> org.apache.jackrabbit.oak.segment.file.FileStoreBuilder.build(FileStoreBuilder.java:445)
>   at 
> org.apache.jackrabbit.oak.segment.file.TarRevisionsTest.setup(TarRevisionsTest.java:74)
>   at 
> org.apache.jackrabbit.oak.segment.azure.journal.AzureTarRevisionsTest.setup(AzureTarRevisionsTest.java:41)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10429) Implementation for IncrementalFFS

2023-09-05 Thread Mohit Kataria (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mohit Kataria updated OAK-10429:

Description: Currently we 

> Implementation for IncrementalFFS
> -
>
> Key: OAK-10429
> URL: https://issues.apache.org/jira/browse/OAK-10429
> Project: Jackrabbit Oak
>  Issue Type: Improvement
>  Components: indexing
>Reporter: Mohit Kataria
>Assignee: Mohit Kataria
>Priority: Major
>
> Currently we 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10429) Implementation for IncrementalFFS

2023-09-05 Thread Mohit Kataria (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mohit Kataria updated OAK-10429:

Summary: Implementation for IncrementalFFS  (was: IncrementalFFS)

> Implementation for IncrementalFFS
> -
>
> Key: OAK-10429
> URL: https://issues.apache.org/jira/browse/OAK-10429
> Project: Jackrabbit Oak
>  Issue Type: Improvement
>  Components: indexing
>Reporter: Mohit Kataria
>Assignee: Mohit Kataria
>Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (OAK-10429) IncrementalFFS

2023-09-05 Thread Mohit Kataria (Jira)
Mohit Kataria created OAK-10429:
---

 Summary: IncrementalFFS
 Key: OAK-10429
 URL: https://issues.apache.org/jira/browse/OAK-10429
 Project: Jackrabbit Oak
  Issue Type: Improvement
  Components: indexing
Reporter: Mohit Kataria






--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Assigned] (OAK-10429) IncrementalFFS

2023-09-05 Thread Mohit Kataria (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mohit Kataria reassigned OAK-10429:
---

Assignee: Mohit Kataria

> IncrementalFFS
> --
>
> Key: OAK-10429
> URL: https://issues.apache.org/jira/browse/OAK-10429
> Project: Jackrabbit Oak
>  Issue Type: Improvement
>  Components: indexing
>Reporter: Mohit Kataria
>Assignee: Mohit Kataria
>Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (OAK-10403) update Tomcat JDBC dependency to 8.5.92

2023-09-05 Thread Julian Reschke (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17754929#comment-17754929
 ] 

Julian Reschke edited comment on OAK-10403 at 9/5/23 7:20 AM:
--

trunk: (1.56.0) 
[da22ffe40e|https://github.com/apache/jackrabbit-oak/commit/da22ffe40e506ebf938f1ef12f38f31e0e92652d]
1.22: 
[1bdc31aa5b|https://github.com/apache/jackrabbit-oak/commit/1bdc31aa5b42354126673ef3ed5f5bda5bf11e5a]



was (Author: reschke):
trunk: 
[da22ffe40e|https://github.com/apache/jackrabbit-oak/commit/da22ffe40e506ebf938f1ef12f38f31e0e92652d]

> update Tomcat JDBC dependency to 8.5.92
> ---
>
> Key: OAK-10403
> URL: https://issues.apache.org/jira/browse/OAK-10403
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: rdbmk
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>  Labels: candidate_oak_1_22
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10403) update Tomcat JDBC dependency to 8.5.92

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10403:
-
Labels:   (was: candidate_oak_1_22)

> update Tomcat JDBC dependency to 8.5.92
> ---
>
> Key: OAK-10403
> URL: https://issues.apache.org/jira/browse/OAK-10403
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: rdbmk
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (OAK-10403) update Tomcat JDBC dependency to 8.5.92

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated OAK-10403:
-
Fix Version/s: 1.22.17

> update Tomcat JDBC dependency to 8.5.92
> ---
>
> Key: OAK-10403
> URL: https://issues.apache.org/jira/browse/OAK-10403
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: rdbmk
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Minor
>  Labels: candidate_oak_1_22
> Fix For: 1.56.0, 1.22.17
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (OAK-10426) oak-segment-azure: enable baseline check

2023-09-05 Thread Julian Reschke (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10426?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke resolved OAK-10426.
--
Resolution: Fixed

> oak-segment-azure: enable baseline check
> 
>
> Key: OAK-10426
> URL: https://issues.apache.org/jira/browse/OAK-10426
> Project: Jackrabbit Oak
>  Issue Type: Task
>  Components: segment-azure
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Major
>  Labels: candidate_oak_1_22
> Fix For: 1.58.0
>
>
> (was disabled upon initial checkin)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (OAK-10425) Ability to remove mixin type without read permission on jcr:mixinTypes property

2023-09-05 Thread Marcel Reutegger (Jira)


[ 
https://issues.apache.org/jira/browse/OAK-10425?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17761968#comment-17761968
 ] 

Marcel Reutegger commented on OAK-10425:


https://github.com/apache/jackrabbit-oak/pull/1100 adds an ignored test.

> Ability to remove mixin type without read permission on jcr:mixinTypes 
> property
> ---
>
> Key: OAK-10425
> URL: https://issues.apache.org/jira/browse/OAK-10425
> Project: Jackrabbit Oak
>  Issue Type: Improvement
>  Components: jcr
>Reporter: Marcel Reutegger
>Priority: Minor
>
> When a session does not have read permission on property jcr:mixinTypes, then 
> Node.removeMixin(String) will fail with an exception. This is inconsistent 
> with other behaviour related to node type information. See OAK-2441 and 
> OAK-10334.
> The call should succeed if the session has permission to write jcr:mixinTypes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (OAK-10427) Clear cache on NodeDocumentCache close

2023-09-05 Thread Marcel Reutegger (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10427?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Marcel Reutegger resolved OAK-10427.

Fix Version/s: 1.58.0
   Resolution: Fixed

Merged the PR.

> Clear cache on NodeDocumentCache close
> --
>
> Key: OAK-10427
> URL: https://issues.apache.org/jira/browse/OAK-10427
> Project: Jackrabbit Oak
>  Issue Type: Improvement
>  Components: documentmk
>Reporter: Marcel Reutegger
>Assignee: Marcel Reutegger
>Priority: Minor
> Fix For: 1.58.0
>
>
> The in-memory caches in NodeDocumentCache are currently not cleared on close 
> and a referenced NodeDocumentCache instance may still retain significant 
> memory after close.
> In-memory caches should be cleared on close.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (OAK-10334) Node.addMixin() may overwrite existing mixins

2023-09-05 Thread Marcel Reutegger (Jira)


 [ 
https://issues.apache.org/jira/browse/OAK-10334?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Marcel Reutegger resolved OAK-10334.

Fix Version/s: 1.58.0
   Resolution: Fixed

Merged the PR.

> Node.addMixin() may overwrite existing mixins
> -
>
> Key: OAK-10334
> URL: https://issues.apache.org/jira/browse/OAK-10334
> Project: Jackrabbit Oak
>  Issue Type: Bug
>  Components: jcr
>Reporter: Marcel Reutegger
>Assignee: Marcel Reutegger
>Priority: Major
> Fix For: 1.58.0
>
>
> A Session lacking permission to read property jcr:mixinTypes, but permission 
> to write will overwrite existing mixins when calling Node.addMixin().
> The implementation does not check if the session has permission to read 
> jcr:mixinTypes and assumes there are no existing values when the session does 
> not have permission. The result is a jcr:mixinTypes property with only a 
> single value passed to addMixin().



--
This message was sent by Atlassian Jira
(v8.20.10#820010)