You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by ad...@apache.org on 2020/11/17 16:49:12 UTC

svn commit: r1883550 [3/3] - in /jackrabbit/site/live/oak/docs: ./ META-INF/ architecture/ coldstandby/ features/ nodestore/ nodestore/document/ nodestore/segment/ oak_api/ plugins/ query/ security/ security/accesscontrol/ security/authentication/ secu...

Added: jackrabbit/site/live/oak/docs/security/authorization/principalbased_evaluation.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/principalbased_evaluation.html?rev=1883550&view=auto
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/principalbased_evaluation.html (added)
+++ jackrabbit/site/live/oak/docs/security/authorization/principalbased_evaluation.html Tue Nov 17 16:49:11 2020
@@ -0,0 +1,444 @@
+<!DOCTYPE html>
+<!--
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
+ | Rendered using Apache Maven Fluido Skin 1.6
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
+    <meta http-equiv="Content-Language" content="en" />
+    <title>Jackrabbit Oak &#x2013; Permission Evaluation with Principal-Based Authorization</title>
+    <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
+    <link rel="stylesheet" href="../../css/site.css" />
+    <link rel="stylesheet" href="../../css/print.css" media="print" />
+      <script type="text/javascript" src="../../js/apache-maven-fluido-1.6.min.js"></script>
+      </head>
+    <body class="topBarEnabled">
+                  <a href="https://github.com/apache/jackrabbit-oak">
+      <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
+        src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
+        alt="Fork me on GitHub">
+    </a>
+      <div id="topbar" class="navbar navbar-fixed-top ">
+      <div class="navbar-inner">
+        <div class="container-fluid">
+        <a data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar">
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+        </a>
+<a class="brand" href="../../"  title="Oak logo"><img src="../../oak_logo.png" alt="Oak logo" />
+</a>
+            <ul class="nav">
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Overview <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="../../index.html" title="Jackrabbit Oak">Jackrabbit Oak</a></li>
+            <li><a href="../../license.html" title="License">License</a></li>
+            <li><a href="../../downloads.html" title="Downloads">Downloads</a></li>
+            <li><a href="../../roadmap.html" title="Roadmap">Roadmap</a></li>
+            <li><a href="../../articles.html" title="Articles">Articles</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Concepts and Architecture <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="../../architecture/overview.html" title="Overview">Overview</a></li>
+            <li><a href="../../architecture/nodestate.html" title="The Node State Model">The Node State Model</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+            <li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
+            <li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Features and Plugins <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li class="dropdown-submenu">
+<a href="../../nodestore/overview.html" title="Node Storage">Node Storage</a>
+              <ul class="dropdown-menu">
+                  <li><a href="../../nodestore/documentmk.html" title="Document NodeStore">Document NodeStore</a></li>
+                  <li><a href="../../nodestore/segment/overview.html" title="Segment NodeStore">Segment NodeStore</a></li>
+                  <li><a href="../../nodestore/compositens.html" title="Composite NodeStore">Composite NodeStore</a></li>
+              </ul>
+            </li>
+            <li class="dropdown-submenu">
+<a href="../../plugins/blobstore.html" title="Blob Storage">Blob Storage</a>
+              <ul class="dropdown-menu">
+                  <li><a href="../../features/direct-binary-access.html" title="Direct Binary Access">Direct Binary Access</a></li>
+                  <li><a href="../../features/direct-binary-access-upload-file.html" title="Direct Binary Access Upload File">Direct Binary Access Upload File</a></li>
+              </ul>
+            </li>
+            <li class="dropdown-submenu">
+<a href="../../query/query.html" title="Query">Query</a>
+              <ul class="dropdown-menu">
+                  <li><a href="../../query/query-engine.html" title="Query Engine">Query Engine</a></li>
+                  <li><a href="../../query/grammar-xpath.html" title="XPath Grammar">XPath Grammar</a></li>
+                  <li><a href="../../query/grammar-sql2.html" title="SQL-2 Grammar">SQL-2 Grammar</a></li>
+                  <li><a href="../../query/query-troubleshooting.html" title="Troubleshooting">Troubleshooting</a></li>
+                  <li><a href="../../query/indexing.html" title="Indexing">Indexing</a></li>
+                  <li><a href="../../query/oak-run-indexing.html" title="Indexing with Oak-Run">Indexing with Oak-Run</a></li>
+                  <li><a href="../../query/lucene.html" title="Lucene Index">Lucene Index</a></li>
+                  <li><a href="../../query/property-index.html" title="Property Index">Property Index</a></li>
+                  <li><a href="../../query/solr.html" title="Solr Index">Solr Index</a></li>
+              </ul>
+            </li>
+            <li class="dropdown-submenu">
+<a href="../../security/overview.html" title="Security">Security</a>
+              <ul class="dropdown-menu">
+                  <li><a href="../../security/introduction.html" title="Introduction">Introduction</a></li>
+                  <li><a href="../../security/reports.html" title="Reports">Reports</a></li>
+                  <li><a href="../../security/authentication.html" title="Authentication">Authentication</a></li>
+                  <li><a href="../../security/authorization.html" title="Authorization">Authorization</a></li>
+                  <li><a href="../../security/principal.html" title="Principal Management">Principal Management</a></li>
+                  <li><a href="../../security/user.html" title="User Management">User Management</a></li>
+              </ul>
+            </li>
+            <li><a href="../../features/atomic-counter.html" title="Atomic Counter">Atomic Counter</a></li>
+            <li><a href="../../features/observation.html" title="Observation">Observation</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Using Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="../../use_getting_started.html" title="Getting Started">Getting Started</a></li>
+            <li><a href="../../construct.html" title="Repository Construction">Repository Construction</a></li>
+            <li><a href="../../osgi_config.html" title="Configuring Oak">Configuring Oak</a></li>
+            <li><a href="../../command_line.html" title="Command Line Tools">Command Line Tools</a></li>
+            <li><a href="../../migration.html" title="Migration">Migration</a></li>
+            <li><a href="../../differences.html" title="Differences to Jackrabbit 2">Differences to Jackrabbit 2</a></li>
+            <li><a href="../../known_issues.html" title="Known Issues">Known Issues</a></li>
+            <li><a href="../../constraints.html" title="Constraints">Constraints</a></li>
+            <li><a href="../../dos_and_donts.html" title="Dos and Don'ts">Dos and Don'ts</a></li>
+            <li><a href="../../coldstandby/coldstandby.html" title="Cold Standby">Cold Standby</a></li>
+            <li><a href="../../FAQ.html" title="FAQ">FAQ</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Developing Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="../../dev_getting_started.html" title="Getting Started">Getting Started</a></li>
+            <li><a href="../../participating.html" title="Participating">Participating</a></li>
+            <li><a href="../../oakathons.html" title="Oakathons">Oakathons</a></li>
+            <li><a href="../../developing-with-git.html" title="Developing with Git">Developing with Git</a></li>
+            <li><a href="../../diagnostic-builds.html" title="Cutting diagnostic builds">Cutting diagnostic builds</a></li>
+            <li><a href="../../branching.html" title="Branching off a new stable">Branching off a new stable</a></li>
+            <li><a href="../../attribution.html" title="Attribution">Attribution</a></li>
+            <li><a href="../../release-schedule.html" title="Release Schedule">Release Schedule</a></li>
+        </ul>
+      </li>
+        <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Links <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+            <li><a href="http://jackrabbit.apache.org/oak" title="Apache Jackrabbit Oak">Apache Jackrabbit Oak</a></li>
+            <li><a href="http://jackrabbit.apache.org/" title="Apache Jackrabbit">Apache Jackrabbit</a></li>
+        </ul>
+      </li>
+              </ul>
+            </div>
+        </div>
+      </div>
+    </div>
+    <div class="container-fluid">
+      <div id="banner">
+        <div class="pull-left"><div id="bannerLeft"><h2>Oak Documentation</h2>
+</div>
+</div>
+        <div class="pull-right"></div>
+        <div class="clear"><hr/></div>
+      </div>
+
+      <div id="breadcrumbs">
+        <ul class="breadcrumb">
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
+</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
+        </ul>
+      </div>
+      <div class="row-fluid">
+        <div id="leftColumn" class="span2">
+          <div class="well sidebar-nav">
+<ul class="nav nav-list">
+          <li class="nav-header">Overview</li>
+    <li><a href="../../index.html" title="Jackrabbit Oak"><span class="none"></span>Jackrabbit Oak</a>  </li>
+    <li><a href="../../license.html" title="License"><span class="none"></span>License</a>  </li>
+    <li><a href="../../downloads.html" title="Downloads"><span class="none"></span>Downloads</a>  </li>
+    <li><a href="../../roadmap.html" title="Roadmap"><span class="none"></span>Roadmap</a>  </li>
+    <li><a href="../../articles.html" title="Articles"><span class="none"></span>Articles</a>  </li>
+          <li class="nav-header">Concepts and Architecture</li>
+    <li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a>  </li>
+    <li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a>  </li>
+          <li class="nav-header">Main APIs</li>
+    <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a>  </li>
+    <li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a>  </li>
+    <li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a>  </li>
+          <li class="nav-header">Features and Plugins</li>
+    <li><a href="../../nodestore/overview.html" title="Node Storage"><span class="icon-chevron-down"></span>Node Storage</a>
+      <ul class="nav nav-list">
+    <li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
+      <ul class="nav nav-list">
+    <li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a>  </li>
+    <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a>  </li>
+    <li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a>  </li>
+    <li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a>  </li>
+    <li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a>  </li>
+    <li><a href="../../clustering.html" title="Clustering"><span class="none"></span>Clustering</a>  </li>
+      </ul>
+  </li>
+    <li><a href="../../nodestore/segment/overview.html" title="Segment NodeStore"><span class="none"></span>Segment NodeStore</a>  </li>
+    <li><a href="../../nodestore/compositens.html" title="Composite NodeStore"><span class="none"></span>Composite NodeStore</a>  </li>
+      </ul>
+  </li>
+    <li><a href="../../plugins/blobstore.html" title="Blob Storage"><span class="icon-chevron-down"></span>Blob Storage</a>
+      <ul class="nav nav-list">
+    <li><a href="../../features/direct-binary-access.html" title="Direct Binary Access"><span class="none"></span>Direct Binary Access</a>  </li>
+    <li><a href="../../features/direct-binary-access-upload-file.html" title="Direct Binary Access Upload File"><span class="none"></span>Direct Binary Access Upload File</a>  </li>
+      </ul>
+  </li>
+    <li><a href="../../query/query.html" title="Query"><span class="icon-chevron-down"></span>Query</a>
+      <ul class="nav nav-list">
+    <li><a href="../../query/query-engine.html" title="Query Engine"><span class="none"></span>Query Engine</a>  </li>
+    <li><a href="../../query/grammar-xpath.html" title="XPath Grammar"><span class="none"></span>XPath Grammar</a>  </li>
+    <li><a href="../../query/grammar-sql2.html" title="SQL-2 Grammar"><span class="none"></span>SQL-2 Grammar</a>  </li>
+    <li><a href="../../query/query-troubleshooting.html" title="Troubleshooting"><span class="none"></span>Troubleshooting</a>  </li>
+    <li><a href="../../query/indexing.html" title="Indexing"><span class="none"></span>Indexing</a>  </li>
+    <li><a href="../../query/oak-run-indexing.html" title="Indexing with Oak-Run"><span class="none"></span>Indexing with Oak-Run</a>  </li>
+    <li><a href="../../query/lucene.html" title="Lucene Index"><span class="none"></span>Lucene Index</a>  </li>
+    <li><a href="../../query/property-index.html" title="Property Index"><span class="none"></span>Property Index</a>  </li>
+    <li><a href="../../query/solr.html" title="Solr Index"><span class="none"></span>Solr Index</a>  </li>
+      </ul>
+  </li>
+    <li><a href="../../security/overview.html" title="Security"><span class="icon-chevron-down"></span>Security</a>
+      <ul class="nav nav-list">
+    <li><a href="../../security/introduction.html" title="Introduction"><span class="none"></span>Introduction</a>  </li>
+    <li><a href="../../security/reports.html" title="Reports"><span class="none"></span>Reports</a>  </li>
+    <li><a href="../../security/authentication.html" title="Authentication"><span class="icon-chevron-right"></span>Authentication</a>  </li>
+    <li><a href="../../security/authorization.html" title="Authorization"><span class="icon-chevron-right"></span>Authorization</a>  </li>
+    <li><a href="../../security/principal.html" title="Principal Management"><span class="icon-chevron-right"></span>Principal Management</a>  </li>
+    <li><a href="../../security/user.html" title="User Management"><span class="icon-chevron-right"></span>User Management</a>  </li>
+      </ul>
+  </li>
+    <li><a href="../../features/atomic-counter.html" title="Atomic Counter"><span class="none"></span>Atomic Counter</a>  </li>
+    <li><a href="../../features/observation.html" title="Observation"><span class="none"></span>Observation</a>  </li>
+          <li class="nav-header">Using Oak</li>
+    <li><a href="../../use_getting_started.html" title="Getting Started"><span class="none"></span>Getting Started</a>  </li>
+    <li><a href="../../construct.html" title="Repository Construction"><span class="none"></span>Repository Construction</a>  </li>
+    <li><a href="../../osgi_config.html" title="Configuring Oak"><span class="none"></span>Configuring Oak</a>  </li>
+    <li><a href="../../command_line.html" title="Command Line Tools"><span class="none"></span>Command Line Tools</a>  </li>
+    <li><a href="../../migration.html" title="Migration"><span class="none"></span>Migration</a>  </li>
+    <li><a href="../../differences.html" title="Differences to Jackrabbit 2"><span class="none"></span>Differences to Jackrabbit 2</a>  </li>
+    <li><a href="../../known_issues.html" title="Known Issues"><span class="none"></span>Known Issues</a>  </li>
+    <li><a href="../../constraints.html" title="Constraints"><span class="none"></span>Constraints</a>  </li>
+    <li><a href="../../dos_and_donts.html" title="Dos and Don'ts"><span class="none"></span>Dos and Don'ts</a>  </li>
+    <li><a href="../../coldstandby/coldstandby.html" title="Cold Standby"><span class="none"></span>Cold Standby</a>  </li>
+    <li><a href="../../FAQ.html" title="FAQ"><span class="none"></span>FAQ</a>  </li>
+          <li class="nav-header">Developing Oak</li>
+    <li><a href="../../dev_getting_started.html" title="Getting Started"><span class="none"></span>Getting Started</a>  </li>
+    <li><a href="../../participating.html" title="Participating"><span class="none"></span>Participating</a>  </li>
+    <li><a href="../../oakathons.html" title="Oakathons"><span class="none"></span>Oakathons</a>  </li>
+    <li><a href="../../developing-with-git.html" title="Developing with Git"><span class="none"></span>Developing with Git</a>  </li>
+    <li><a href="../../diagnostic-builds.html" title="Cutting diagnostic builds"><span class="none"></span>Cutting diagnostic builds</a>  </li>
+    <li><a href="../../branching.html" title="Branching off a new stable"><span class="none"></span>Branching off a new stable</a>  </li>
+    <li><a href="../../attribution.html" title="Attribution"><span class="none"></span>Attribution</a>  </li>
+    <li><a href="../../release-schedule.html" title="Release Schedule"><span class="none"></span>Release Schedule</a>  </li>
+          <li class="nav-header">Links</li>
+    <li><a href="http://jackrabbit.apache.org/oak" class="externalLink" title="Apache Jackrabbit Oak"><span class="none"></span>Apache Jackrabbit Oak</a>  </li>
+    <li><a href="http://jackrabbit.apache.org/" class="externalLink" title="Apache Jackrabbit"><span class="none"></span>Apache Jackrabbit</a>  </li>
+  </ul>
+          <hr />
+          <div id="poweredBy">
+          <script type="text/javascript">asyncJs( 'https://apis.google.com/js/plusone.js' )</script>
+        <div class="g-plusone" data-href="http://jackrabbit.apache.org/oak/docs/" data-size="tall" ></div>
+                  <div class="clear"></div>
+              <div class="clear"></div>
+              <div class="clear"></div>
+              <div class="clear"></div>
+  <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy"><img class="builtBy" alt="Built by Maven" src="../../images/logos/maven-feather.png" /></a>
+              </div>
+          </div>
+        </div>
+        <div id="bodyColumn"  class="span10" >
+<!--
+   Licensed to the Apache Software Foundation (ASF) under one or more
+   contributor license agreements.  See the NOTICE file distributed with
+   this work for additional information regarding copyright ownership.
+   The ASF licenses this file to You under the Apache License, Version 2.0
+   (the "License"); you may not use this file except in compliance with
+   the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+-->
+<div class="section">
+<h2><a name="Permission_Evaluation_with_Principal-Based_Authorization"></a>Permission Evaluation with Principal-Based Authorization</h2>
+<p>The examples below describe permission evaluation based on an authorization setup with the following characteristices:</p>
+
+<div>
+<div>
+<pre class="source">FilterProviderImpl:
+    - Path: &quot;/home/users/system/supported&quot;
+
+CompositeAuthorizationConfiguration (CompositionType=AND): 
+   
+    PrincipalBasedAuthorizationConfiguration
+    - FilterProvider: reference to FilterProviderImpl as configured above (default implementation)
+    - Enable AggregationFilter: true
+    - Ranking: 500
+    
+    AuthorizationConfigurationImpl
+    - Ranking: 100
+</pre></div></div>
+
+<p>The following principals will be used in various combinations:</p>
+
+<div>
+<div>
+<pre class="source">Principals not supported by the configured 'FilterProvider'
+
+- GroupPrincipal:      'testgroup'        
+- Principal:           'user'        
+- SystemUserPrincipal: 'service-A' with path /home/users/system/45
+
+Principals supporeted by the configured 'FilterProvider'
+
+- SystemUserPrincipal: 'service-B' with path /home/users/system/supported/featureB/11
+- SystemUserPrincipal: 'service-C' with path /home/users/system/supported/featureC/C1
+</pre></div></div>
+
+<p>The following access control setup has been defined:</p>
+
+<div>
+<div>
+<pre class="source">grant access using regular path-based ac-management calls 
+i.e. 'AccessControlManager.getApplicablePolicies(String)' or 'AccessControlManager.getPolicies(String))'
+
+- 'testgroup': /content [jcr:read, jcr:readAccessControl]
+- 'service-A': /content [jcr:versionManagement]
+- 'service-B': /content [jcr:read, jcr:modifyProperties]
+
+grant access using principal-based ac-management calls (only possible for supported principals)
+i.e. 'JackrabbitAccessControlManager.getApplicablePolicies(Principal)' or 'AccessControlManager.getPolicies(Principal))'
+
+- 'service-B': /content [jcr:read, jcr:nodeTypeManagement]
+- 'service-C': /content [jcr:read, jcr:lockManagement]
+</pre></div></div>
+
+<div class="section">
+<div class="section">
+<div class="section">
+<h5><a name="Example_1:_Subject_with_principals_user_testgroup"></a>Example 1: Subject with principals <i>&#x2018;user&#x2019;</i>, <i>&#x2018;testgroup&#x2019;</i></h5>
+<p>Since neither &#x2018;user&#x2019; nor &#x2018;testgroup&#x2019; is a system-user-princial supported by principal-based authorization, principal-based permission evaluation is omitted.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>, <tt>jcr:readAccessControl</tt> at /content.</p></div>
+<div class="section">
+<h5><a name="Example_2:_Subject_with_principals_service-A_testgroup"></a>Example 2: Subject with principals <i>&#x2018;service-A&#x2019;</i>, <i>&#x2018;testgroup&#x2019;</i></h5>
+<p>Since neither &#x2018;service-A&#x2019; nor &#x2018;testgroup&#x2019; is supported by principal-based authorization, principal-based permission evaluation is omitted.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>, <tt>jcr:readAccessControl</tt>, <tt>jcr:versionManagement</tt> at /content.</p></div>
+<div class="section">
+<h5><a name="Example_3:_Subject_with_principals_service-B_testgroup"></a>Example 3: Subject with principals <i>&#x2018;service-B&#x2019;</i>, <i>&#x2018;testgroup&#x2019;</i></h5>
+<p>Since &#x2018;testgroup&#x2019; is not supported by principal-based authorization, principal-based permission evaluation is omitted and only path-based access control setup take effect.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>,<tt>jcr:readAccessControl</tt>,<tt>jcr:modifyProperties</tt> at /content.</p></div>
+<div class="section">
+<h5><a name="Example_4:_Subject_with_principals_service-A_service-B"></a>Example 4: Subject with principals <i>&#x2018;service-A&#x2019;</i>, <i>&#x2018;service-B&#x2019;</i></h5>
+<p>Since &#x2018;service-A&#x2019; is not supported by principal-based authorization, principal-based permission evaluation is omitted and only path-based access control setup take effect.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>,<tt>jcr:modifyProperties</tt>,<tt>jcr:versionManagement</tt> at /content.</p></div>
+<div class="section">
+<h5><a name="Example_5:_Subject_with_principals_service-B"></a>Example 5: Subject with principals <i>&#x2018;service-B&#x2019;</i></h5>
+<p>&#x2018;service-B&#x2019; is supported by principal-based authorization and no unsupported principal is present in the Subject. Therefore, principal-based permission evaluation takes effect. Since the <tt>AggregationFilter</tt> is enabled in the configuration describedf above, permission evaluation stops and does not continue evaluating path-based permissions.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt> at /content.</p>
+<p>NOTE: If <tt>AggregationFilter</tt> was disabled <i>both</i> permission providers would be used for the evaluation. The result then depends on the <tt>CompositionType</tt>:</p>
+<table border="0" class="table table-striped">
+<thead>
+
+<tr class="a">
+<th> <tt>AggregationFilter</tt> </th>
+<th> <tt>CompositionType.AND</tt> </th>
+<th> <tt>CompositionType.OR</tt> </th></tr>
+</thead><tbody>
+
+<tr class="b">
+<td> enabled           </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt> </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt> </td></tr>
+<tr class="a">
+<td> disabled          </td>
+<td> <tt>jcr:read</tt>          </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:modifyProperties</tt>, <tt>jcr:nodeTypeManagement</tt> </td></tr>
+</tbody>
+</table></div>
+<div class="section">
+<h5><a name="Example_6:_Subject_with_principals_service-C"></a>Example 6: Subject with principals <i>&#x2018;service-C&#x2019;</i></h5>
+<p>&#x2018;service-C&#x2019; is supported by principal-based authorization and no unsupported principal is present in the Subject. Therefore, principal-based permission evaluation takes effect. Since the <tt>AggregationFilter</tt> is enabled in the configuration described above, permission evaluation stops and does not continue evaluating path-based permissions.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>, <tt>jcr:lockManagement</tt> at /content.</p>
+<p>NOTE: If <tt>AggregationFilter</tt> was disabled <i>both</i> permission providers would be used for the evaluation. The result then depends on the <tt>CompositionType</tt>:</p>
+<table border="0" class="table table-striped">
+<thead>
+
+<tr class="a">
+<th> <tt>AggregationFilter</tt> </th>
+<th> <tt>CompositionType.AND</tt> </th>
+<th> <tt>CompositionType.OR</tt> </th></tr>
+</thead><tbody>
+
+<tr class="b">
+<td> enabled           </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:lockManagement</tt> </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:lockManagement</tt> </td></tr>
+<tr class="a">
+<td> disabled          </td>
+<td> -                   </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:lockManagement</tt> </td></tr>
+</tbody>
+</table></div>
+<div class="section">
+<h5><a name="Example_6:_Subject_with_principals_service-B_service-C"></a>Example 6: Subject with principals <i>&#x2018;service-B&#x2019;</i>, <i>&#x2018;service-C&#x2019;</i></h5>
+<p>Both &#x2018;service-B&#x2019; is supported by principal-based authorization and no unsupported principal is present in the Subject. Therefore, principal-based permission evaluation takes effect. Since the <tt>AggregationFilter</tt> is enabled in the configuration described above, permission evaluation stops and does not continue evaluating path-based permissions.</p>
+<p>Result: the Session is granted <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt>, <tt>jcr:lockManagement</tt> at /content.</p>
+<p>NOTE: If <tt>AggregationFilter</tt> was disabled <i>both</i> permission providers would be used for the evaluation. The result then depends on the <tt>CompositionType</tt>:</p>
+<table border="0" class="table table-striped">
+<thead>
+
+<tr class="a">
+<th> <tt>AggregationFilter</tt> </th>
+<th> <tt>CompositionType.AND</tt> </th>
+<th> <tt>CompositionType.OR</tt> </th></tr>
+</thead><tbody>
+
+<tr class="b">
+<td> enabled           </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt>, <tt>jcr:lockManagement</tt> </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:nodeTypeManagement</tt>, <tt>jcr:lockManagement</tt> </td></tr>
+<tr class="a">
+<td> disabled          </td>
+<td> <tt>jcr:read</tt>          </td>
+<td> <tt>jcr:read</tt>, <tt>jcr:modifyProperties</tt>, <tt>jcr:nodeTypeManagement</tt>, <tt>jcr:lockManagement</tt> </td></tr>
+</tbody>
+</table></div></div></div></div>
+        </div>
+      </div>
+    </div>
+    <hr/>
+    <footer>
+      <div class="container-fluid">
+        <div class="row-fluid">
+            <p>Copyright &copy;2012&#x2013;2020
+<a href="https://www.apache.org/">The Apache Software Foundation</a>.
+All rights reserved.</p>
+        </div>
+                          <div id="ohloh" class="pull-right">
+      <script type="text/javascript" src="https://www.ohloh.net/p/jackrabbit-oak/widgets/project_thin_badge.js"></script>
+    </div>
+        </div>
+    </footer>
+    </body>
+</html>
\ No newline at end of file

Modified: jackrabbit/site/live/oak/docs/security/authorization/restriction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/restriction.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/restriction.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/restriction.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Restriction Management</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/introduction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/introduction.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/introduction.html (original)
+++ jackrabbit/site/live/oak/docs/security/introduction.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Introduction to Oak Security</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/overview.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/overview.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/overview.html (original)
+++ jackrabbit/site/live/oak/docs/security/overview.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; The Oak Security Layer</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Permissions</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/default.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/default.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Permissions : The Default Implementation</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/differences.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/differences.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Permissions : Differences wrt Jackrabbit 2.x</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission/evaluation.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/evaluation.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/evaluation.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/evaluation.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Permission Evaluation in Detail</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission/multiplexing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/multiplexing.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/multiplexing.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/multiplexing.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Multiplexing support in the PermissionStore</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Permissions vs Privileges</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/principal.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/principal.html (original)
+++ jackrabbit/site/live/oak/docs/security/principal.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Principal Management</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/principal/cache.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/cache.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/principal/cache.html (original)
+++ jackrabbit/site/live/oak/docs/security/principal/cache.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Caching Results of Principal Resolution</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/principal/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/differences.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/principal/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/principal/differences.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Principal Management : Differences wrt Jackrabbit 2.x</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/principal/principalprovider.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal/principalprovider.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/principal/principalprovider.html (original)
+++ jackrabbit/site/live/oak/docs/security/principal/principalprovider.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Implementations of the PrincipalProvider Interface</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/privilege.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege.html (original)
+++ jackrabbit/site/live/oak/docs/security/privilege.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Privilege Management</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/privilege/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/default.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/privilege/default.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Privilege Management : The Default Implementation</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/privilege/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/differences.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/privilege/differences.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Privilege Management : Differences wrt Jackrabbit 2.x</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html (original)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Privilege Management : Mapping Privileges to Items</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html (original)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Privilege Management : Mapping API Calls to Privileges</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">
@@ -539,7 +539,7 @@
 
 <tr class="b">
 <td> <tt>Session.move</tt>                               </td>
-<td> <tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td></tr>
+<td> same privileges as if the node to move would be removed and created using regular API calls (items in the subtree are not checked) </td></tr>
 <tr class="a">
 <td> <tt>Session.importXml</tt>                          </td>
 <td> same privileges as if items would be created using regular API calls </td></tr>
@@ -746,7 +746,7 @@
 
 <tr class="b">
 <td> <tt>Workspace.move</tt>                             </td>
-<td> <tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td></tr>
+<td> same privileges as if the node to move would be removed and created using regular API calls (items in the subtree are not checked) </td></tr>
 <tr class="a">
 <td> <tt>Workspace.copy</tt>                             </td>
 <td> same privileges as if items would be created using regular API calls </td></tr>

Modified: jackrabbit/site/live/oak/docs/security/reports.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/reports.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/reports.html (original)
+++ jackrabbit/site/live/oak/docs/security/reports.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Security Reports</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user.html (original)
+++ jackrabbit/site/live/oak/docs/security/user.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; User Management</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/authorizableaction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizableaction.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizableaction.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizableaction.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Authorizable Actions</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Authorizable Node Name Generation</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/default.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/default.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; User Management : The Default Implementation</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/differences.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/differences.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; User Management : Differences to Jackrabbit 2.x</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/expiry.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/expiry.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/expiry.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/expiry.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Password Expiry and Force Initial Password Change</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/groupaction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/groupaction.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/groupaction.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/groupaction.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Group Actions</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/history.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/history.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/history.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/history.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Password History</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/membership.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/membership.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/membership.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/membership.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Group Membership</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/query.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/query.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/query.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Searching Users and Groups</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/security/user/useraction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/useraction.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/useraction.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/useraction.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; User Actions</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">

Modified: jackrabbit/site/live/oak/docs/use_getting_started.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/use_getting_started.html?rev=1883550&r1=1883549&r2=1883550&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/use_getting_started.html (original)
+++ jackrabbit/site/live/oak/docs/use_getting_started.html Tue Nov 17 16:49:11 2020
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-10-07 
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2020-11-17 
  | Rendered using Apache Maven Fluido Skin 1.6
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20201007" />
+    <meta name="Date-Revision-yyyymmdd" content="20201117" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak &#x2013; Runnable jar</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.6.min.css" />
@@ -156,9 +156,9 @@
 
       <div id="breadcrumbs">
         <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2020-10-07<span class="divider">|</span>
+        <li id="publishDate">Last Published: 2020-11-17<span class="divider">|</span>
 </li>
-          <li id="projectVersion">Version: 1.35-SNAPSHOT</li>
+          <li id="projectVersion">Version: 1.37-SNAPSHOT</li>
         </ul>
       </div>
       <div class="row-fluid">