You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Christophe Jelger (JIRA)" <ji...@apache.org> on 2019/07/04 12:25:00 UTC
[jira] [Updated] (SLING-8561) ACLs on service users should be
ignored because of randomised node names
[ https://issues.apache.org/jira/browse/SLING-8561?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Christophe Jelger updated SLING-8561:
-------------------------------------
Description:
The creation of service users via reponit creates randomised node names, for example, something like
{code:java}
/home/users/system/communities/7w6ebrYBWEGY5r5cHQ-E [social-enablement-replication-user]
{code}
This means than ACLs cannot be set later on that node name if the content package tries to set some ACLs on
{code:java}
/home/users/system/communities/social-enablement-replication-user
{code}
This means that we should currently ignore ACLs for service users, that is, nodes with primary type {{rep:SystemUser}} like.
Which means in the repoinit section, the following 2 lines should for example be removed:
{code:java}
create service user social-enablement-replication-user with path /home/users/system/communities
allow jcr:all on /home/users/system/communities/social-enablement-replication-user
{code}
was:
The creation of service users via reponit creates randomised node names, for example, something like
{code:java}
/home/users/system/communities/7w6ebrYBWEGY5r5cHQ-E [social-enablement-replication-user]
{code}
This means than ACLs cannot be set later on that node name if the content package tries to set some ACLs on
{code:java}
/home/users/system/communities/social-enablement-replication-user
{code}
This means that we should currently ignore ACLs for service users, that is, nodes with primary type {{rep:SystemUser}} like for example [https://git.corp.adobe.com/CQ/social-enablement/blob/master/content/jcr_root/home/users/system/communities/social-enablement-replication-user/.content.xml]
> ACLs on service users should be ignored because of randomised node names
> ------------------------------------------------------------------------
>
> Key: SLING-8561
> URL: https://issues.apache.org/jira/browse/SLING-8561
> Project: Sling
> Issue Type: Bug
> Components: Content-Package to Feature Model Converter
> Reporter: Christophe Jelger
> Assignee: Simone Tripodi
> Priority: Blocker
>
> The creation of service users via reponit creates randomised node names, for example, something like
> {code:java}
> /home/users/system/communities/7w6ebrYBWEGY5r5cHQ-E [social-enablement-replication-user]
> {code}
> This means than ACLs cannot be set later on that node name if the content package tries to set some ACLs on
> {code:java}
> /home/users/system/communities/social-enablement-replication-user
> {code}
> This means that we should currently ignore ACLs for service users, that is, nodes with primary type {{rep:SystemUser}} like.
> Which means in the repoinit section, the following 2 lines should for example be removed:
>
> {code:java}
> create service user social-enablement-replication-user with path /home/users/system/communities
> allow jcr:all on /home/users/system/communities/social-enablement-replication-user
> {code}
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)