You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "Jukka Zitting (JIRA)" <ji...@apache.org> on 2013/11/10 22:35:17 UTC

[jira] [Commented] (OAK-1163) ACL evaluation for observation events

    [ https://issues.apache.org/jira/browse/OAK-1163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13818553#comment-13818553 ] 

Jukka Zitting commented on OAK-1163:
------------------------------------

I would rather look at optimizing {{SecureNodeState.compareAgainstBaseState}} for this purpose.

The only troublesome case here is handling read-protected parent nodes, but I think it should be possible to extend the {{NodeStateDiff}} contract to cover that case by allowing one or both of the node states passed to {{childNodeChanged()}} to be non-existent.

> ACL evaluation for observation events
> -------------------------------------
>
>                 Key: OAK-1163
>                 URL: https://issues.apache.org/jira/browse/OAK-1163
>             Project: Jackrabbit Oak
>          Issue Type: New Feature
>          Components: core, jcr, security
>            Reporter: Alexander Klimetschek
>
> The JCR observation implementation in Oak does not evaluate ACLs yet, so any session currently sees all events. {{SecureValidator}} is the intended place to do the checks.



--
This message was sent by Atlassian JIRA
(v6.1#6144)