Hello,

I have a user granted jcr:read and jcr:write privileges on a resource
"parentNode". Under this resource, I have two nodes with type sling:Folder,
and I've tried to move a node from one to the other. It fails with
"javax.jcr.AccessDeniedException: Not allowed to move node", until I grant
my user the privilege "rep:write" on the "parentNode" resource.

I don't get why I have to do that, the Sling documentation doesn't even
talk about "rep:write", which according to Adobe documentation is "a
jackrabbit specific aggregate privilege of jcr:write
and jcr:nodeTypeManagement".

I thought the privileges jcr:modifyProperties jcr:addChildNodes
jcr:removeNode jcr:removeChildNodes (aggregated in jcr:write) would be
enough to move a node to another parent. I don't mind granting "rep:write"
privilege to my user, but I would like to better understand why it's
required.

I'm using Sling 7.

Thank you for your help.

Best regards,
Guillaume

Reply via email to