Setting of a Property requires remove privilege on node
-------------------------------------------------------
Key: SLING-897
URL: https://issues.apache.org/jira/browse/SLING-897
Project: Sling
Issue Type: Bug
Components: Servlets Post
Affects Versions: Servlets Post 2.0.2
Reporter: christian
Priority: Minor
If you set a single value Proeprty with a Post handled by the PostServlet,
the related property is removed first and than the value is set.
While the effect is the desired change of the Property's value, it has
side-effects.
Et least the connected session has to have remove-privilege to set the property.
Eventing may be unexpected, and other may result.
Example:
String path = "/content/node1";
String pName = "property1";
Node node = (Node) session.getRootNode().getIem(path);
try {
session.checkPermission(path+"/"+pName, "set_property")
//==allowed
} catch (AccessControlException) {
}
But
POST "/content/node1"
property1=test
=> AccessDenied
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
