You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Marcel Reutegger (Jira)" <ji...@apache.org> on 2023/06/30 14:08:00 UTC
[jira] [Created] (OAK-10334) Node.addMixin() may overwrite existing mixins
Marcel Reutegger created OAK-10334:
--------------------------------------
Summary: Node.addMixin() may overwrite existing mixins
Key: OAK-10334
URL: https://issues.apache.org/jira/browse/OAK-10334
Project: Jackrabbit Oak
Issue Type: Bug
Components: jcr
Reporter: Marcel Reutegger
A Session lacking permission to read property jcr:mixinTypes, but permission to write will overwrite existing mixins when calling Node.addMixin().
The implementation does not check if the session has permission to read jcr:mixinTypes and assumes there are no existing values when the session does not have permission. The result is a jcr:mixinTypes property with only a single value passed to addMixin().
--
This message was sent by Atlassian Jira
(v8.20.10#820010)