Hi, yes, it is stored internally in nodes/properties. But they are not visible in the repository structure (the nodes are accessed by their id).
In my case the group node has a property containing the members (org.apache.jackrabbit.core.security.user.GroupImpl.PropertyBasedMembershipProvider.addMember(AuthorizableImpl)). I had the problem, that the user was not member of its group (org.apache.jackrabbit.api.security.user.Authorizable.memberOf()), but the group contained the user as its member (add user to group failed), so I had to remove/add the user to the group. Seems like the information is redundant (cached) and can diverge for unknown reason. Regards, Robert -----Ursprüngliche Nachricht----- Von: Ulrich [mailto:for...@gombers.de] Gesendet: Dienstag, 2. Juli 2013 09:12 An: jackrabbit Betreff: Usermanagement: Where are the user/group relations stored? How does jackrabbit maintain the user/group relationschip; where is stored (which node, which property) to which group a user belongs? I didn't find any hint in the usermanagment wiki "http://wiki.apache.org/jackrabbit/UserManagement";. Any hint is really appreciated. Ulrich
