> I found the wiki page describing the access control mechanism (
>> http://wiki.apache.org/jackrabbit/AccessControl). I understand, from
>> this
>> page, that resource based ACL's are the default mechanism. This will suit
>> my purposes fine, but I can't find any documentation of how to configure
>> the
>> lists? Can someone point me to the appropriate location?
>>
>
> JCR 2.0 API defines some access control related interfaces, notably
>
> - AccessControlManager: used to manipulate access control policies
> - AccessControlPolicy and a derived interface AccessControlList
> - AccessControlEntry
> - Privilege
>
> the specification can provide you with some basic information
> about how to use the api.
>
>
So, there's only a API interface? I thought perhaps there was some
configuration file that would allow me to declare my access rules.