[jira] [Commented] (SLING-5227) Remove loginAdministrative() usage from org.apache.sling.bgservlets

["Alexandre COLLIGNON (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-5227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15154231#comment-15154231 ] 

Alexandre COLLIGNON commented on SLING-5227:
--------------------------------------------

As far as I can tell, the only occurrence of loginAdmin is in the WebConsole Plugin [1]. Assuming that only administrators have access to the web console, it is fair to assume that whoever renders jobs will have access to the underlying content.

I would therefore recommend to use the user session to perform job manipulation.

[1] {{JobConsolePlugin.Plugin#renderContent}}

> Remove loginAdministrative() usage from org.apache.sling.bgservlets
> -------------------------------------------------------------------
>
>                 Key: SLING-5227
>                 URL: https://issues.apache.org/jira/browse/SLING-5227
>             Project: Sling
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: Antonio Sanso
>            Assignee: Bertrand Delacretaz
>
> Counted 1 occurrence



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)