You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-commits@jackrabbit.apache.org by an...@apache.org on 2013/02/14 14:20:41 UTC

svn commit: r1446165 - /jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java

Author: angela
Date: Thu Feb 14 13:20:41 2013
New Revision: 1446165

URL: http://svn.apache.org/r1446165
Log:
OAK-527 : Implement Permission evaluation  (work in progress)

Modified:
    jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java

Modified: jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java
URL: http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java?rev=1446165&r1=1446164&r2=1446165&view=diff
==============================================================================
--- jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java (original)
+++ jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/PermissionValidator.java Thu Feb 14 13:20:41 2013
@@ -32,14 +32,15 @@ import org.apache.jackrabbit.oak.spi.sec
 import org.apache.jackrabbit.oak.spi.state.NodeState;
 
 /**
- * PermissionValidator... TODO
+ * Validator implementation that checks for sufficient permission for all
+ * write operations executed by a given content session.
  */
 class PermissionValidator implements Validator {
 
     /* TODO
-     * - special permissions for protected items (versioning, access control, etc.)
      * - Renaming nodes or Move with same parent are reflected as remove+add -> needs special handling
      * - review usage of OAK_CHILD_ORDER property (in particular if the property was removed
+     * - Proper handling of jcr:nodeTypeManagement privilege.
      */
 
     private final Tree parentBefore;