You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Eric Norman (Jira)" <ji...@apache.org> on 2022/05/18 23:05:00 UTC
[jira] [Commented] (SLING-11321) The effective acl/ace json output should contain the paths where the privileges were declared
[ https://issues.apache.org/jira/browse/SLING-11321?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17539120#comment-17539120 ]
Eric Norman commented on SLING-11321:
-------------------------------------
PR #12 adds the extra info to the json output
> The effective acl/ace json output should contain the paths where the privileges were declared
> ---------------------------------------------------------------------------------------------
>
> Key: SLING-11321
> URL: https://issues.apache.org/jira/browse/SLING-11321
> Project: Sling
> Issue Type: Improvement
> Reporter: Eric Norman
> Assignee: Eric Norman
> Priority: Minor
> Fix For: JCR Jackrabbit Access Manager 3.0.12
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Use Case: For debugging purposes, or if you want a UI view of the effective ACE or ACL to be able to draw links to where the privileges were defined.
> It would be useful for the effective acl and effective ace json to include a "declaredAt" structure for each principal that has the all paths where an applicable ACE was defined.
> Expected something like this for node based ACE definitions:
> {noformat}
> {
> "principal": "everyone",
> "privileges": {
> "jcr:read": {
> "allow": true
> },
> "jcr:readAccessControl": {
> "allow": true
> }
> },
> "declaredAt": {
> "node": [
> "/content",
> "/content/pages"
> ]
> }
> }{noformat}
> Where declaredAt/node contains the paths for any entries defined on a node.
> Or something like this for principal based ACE definitions:
> {noformat}
> {
> "principal":"sling-readall",
> "privileges":{
> "jcr:read":{
> "allow":true
> },
> "jcr:readAccessControl":{
> "allow":true
> }
> },
> "declaredAt":{
> "principal":[
> "/content/pages",
> "/"
> ]
> }
> }{noformat}
> Where declaredAt/principal contains the paths for any principalbased access controlĀ
--
This message was sent by Atlassian Jira
(v8.20.7#820007)