You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by to...@apache.org on 2015/06/22 12:12:09 UTC
svn commit: r1686825 [2/2] - in /jackrabbit/site/live/oak/docs: ./
architecture/ coldstandby/ nodestore/ oak-mongo-js/ oak_api/ plugins/
query/ security/ security/accesscontrol/ security/authentication/
security/permission/ security/principal/ security...
Added: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html?rev=1686825&view=auto
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html (added)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html Mon Jun 22 10:12:08 2015
@@ -0,0 +1,789 @@
+<!DOCTYPE html>
+<!--
+ | Generated by Apache Maven Doxia at 2015-06-22
+ | Rendered using Apache Maven Fluido Skin 1.3.0
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta charset="UTF-8" />
+ <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
+ <meta http-equiv="Content-Language" content="en" />
+ <title>Jackrabbit Oak - Privilege Management : Mapping Privileges to Items</title>
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
+ <link rel="stylesheet" href="../../css/site.css" />
+ <link rel="stylesheet" href="../../css/print.css" media="print" />
+
+
+ <script type="text/javascript" src="../../js/apache-maven-fluido-1.3.0.min.js"></script>
+
+
+ </head>
+ <body class="topBarEnabled">
+
+
+
+
+
+
+ <a href="http://github.com/apache/jackrabbit-oak">
+ <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
+ src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
+ alt="Fork me on GitHub">
+ </a>
+
+
+
+
+
+ <div id="topbar" class="navbar navbar-fixed-top ">
+ <div class="navbar-inner">
+ <div class="container-fluid">
+ <a data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar">
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ </a>
+
+ <a class="brand" href="../../" title="Oak logo">
+
+
+ <img src="../../oak_logo.png" alt="Oak logo" />
+
+ </a>
+
+ <ul class="nav">
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Overview <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../index.html" title="Jackrabbit Oak">Jackrabbit Oak</a>
+</li>
+
+ <li> <a href="../../license.html" title="License">License</a>
+</li>
+
+ <li> <a href="../../downloads.html" title="Downloads">Downloads</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Concepts and Architecture <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../architecture/overview.html" title="Overview">Overview</a>
+</li>
+
+ <li> <a href="../../architecture/nodestate.html" title="The Node State Model">The Node State Model</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a>
+</li>
+
+ <li> <a href="../../oak_api/overview.html" title="Oak API">Oak API</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Features and Plugins <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../nodestore/overview.html" title="Node Storage">Node Storage</a>
+</li>
+
+ <li> <a href="../../plugins/blobstore.html" title="Blob Storage">Blob Storage</a>
+</li>
+
+ <li> <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">DocumentNodeStore</a>
+</li>
+
+ <li> <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">SegmentNodeStore</a>
+</li>
+
+ <li> <a href="../../query/query.html" title="Query">Query</a>
+</li>
+
+ <li> <a href="../../query/lucene.html" title="Index - Lucene">Index - Lucene</a>
+</li>
+
+ <li> <a href="../../query/solr.html" title="Index - Solr">Index - Solr</a>
+</li>
+
+ <li> <a href="../../security/overview.html" title="Security">Security</a>
+</li>
+
+ <li> <a href="../../clustering.html" title="Clustering">Clustering</a>
+</li>
+
+ <li> <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">Persistent Cache</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Using Oak <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../use_getting_started.html" title="Getting Started">Getting Started</a>
+</li>
+
+ <li> <a href="../../construct.html" title="Repository Construction">Repository Construction</a>
+</li>
+
+ <li> <a href="../../osgi_config.html" title="Configuring Oak">Configuring Oak</a>
+</li>
+
+ <li> <a href="../../command_line.html" title="Command Line Tools">Command Line Tools</a>
+</li>
+
+ <li> <a href="../../differences.html" title="Differences to Jackrabbit 2">Differences to Jackrabbit 2</a>
+</li>
+
+ <li> <a href="../../known_issues.html" title="Known Issues">Known Issues</a>
+</li>
+
+ <li> <a href="../../dos_and_donts.html" title="Dos and Don'ts">Dos and Don'ts</a>
+</li>
+
+ <li> <a href="../../coldstandby/coldstandby.html" title="Cold Standby">Cold Standby</a>
+</li>
+
+ <li> <a href="../../FAQ.html" title="FAQ">FAQ</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Developing Oak <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../dev_getting_started.html" title="Getting Started">Getting Started</a>
+</li>
+
+ <li> <a href="../../participating.html" title="Participating">Participating</a>
+</li>
+
+ <li> <a href="../../apidocs/index.html" title="API Docs">API Docs</a>
+</li>
+
+ <li> <a href="../../attribution.html" title="Attribution">Attribution</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Links <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="http://jackrabbit.apache.org/oak" title="Apache Jackrabbit Oak">Apache Jackrabbit Oak</a>
+</li>
+
+ <li> <a href="http://jackrabbit.apache.org/" title="Apache Jackrabbit">Apache Jackrabbit</a>
+</li>
+ </ul>
+ </li>
+ </ul>
+
+
+
+
+ </div>
+
+ </div>
+ </div>
+ </div>
+
+ <div class="container-fluid">
+ <div id="banner">
+ <div class="pull-left">
+ <div id="bannerLeft">
+ <h2>Oak Documentation</h2>
+ </div>
+ </div>
+ <div class="pull-right"> </div>
+ <div class="clear"><hr/></div>
+ </div>
+
+ <div id="breadcrumbs">
+ <ul class="breadcrumb">
+
+
+ <li id="publishDate">Last Published: 2015-06-22</li>
+ <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
+
+
+
+
+ </ul>
+ </div>
+
+
+ <div class="row-fluid">
+ <div id="leftColumn" class="span3">
+ <div class="well sidebar-nav">
+
+
+ <ul class="nav nav-list">
+ <li class="nav-header">Overview</li>
+
+ <li>
+
+ <a href="../../index.html" title="Jackrabbit Oak">
+ <i class="none"></i>
+ Jackrabbit Oak</a>
+ </li>
+
+ <li>
+
+ <a href="../../license.html" title="License">
+ <i class="none"></i>
+ License</a>
+ </li>
+
+ <li>
+
+ <a href="../../downloads.html" title="Downloads">
+ <i class="none"></i>
+ Downloads</a>
+ </li>
+ <li class="nav-header">Concepts and Architecture</li>
+
+ <li>
+
+ <a href="../../architecture/overview.html" title="Overview">
+ <i class="none"></i>
+ Overview</a>
+ </li>
+
+ <li>
+
+ <a href="../../architecture/nodestate.html" title="The Node State Model">
+ <i class="none"></i>
+ The Node State Model</a>
+ </li>
+ <li class="nav-header">Main APIs</li>
+
+ <li>
+
+ <a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API">
+ <i class="none"></i>
+ JCR API</a>
+ </li>
+
+ <li>
+
+ <a href="../../oak_api/overview.html" title="Oak API">
+ <i class="none"></i>
+ Oak API</a>
+ </li>
+ <li class="nav-header">Features and Plugins</li>
+
+ <li>
+
+ <a href="../../nodestore/overview.html" title="Node Storage">
+ <i class="none"></i>
+ Node Storage</a>
+ </li>
+
+ <li>
+
+ <a href="../../plugins/blobstore.html" title="Blob Storage">
+ <i class="none"></i>
+ Blob Storage</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">
+ <i class="none"></i>
+ DocumentNodeStore</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">
+ <i class="none"></i>
+ SegmentNodeStore</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/query.html" title="Query">
+ <i class="none"></i>
+ Query</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/lucene.html" title="Index - Lucene">
+ <i class="none"></i>
+ Index - Lucene</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/solr.html" title="Index - Solr">
+ <i class="none"></i>
+ Index - Solr</a>
+ </li>
+
+ <li>
+
+ <a href="../../security/overview.html" title="Security">
+ <i class="none"></i>
+ Security</a>
+ </li>
+
+ <li>
+
+ <a href="../../clustering.html" title="Clustering">
+ <i class="none"></i>
+ Clustering</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">
+ <i class="none"></i>
+ Persistent Cache</a>
+ </li>
+ <li class="nav-header">Using Oak</li>
+
+ <li>
+
+ <a href="../../use_getting_started.html" title="Getting Started">
+ <i class="none"></i>
+ Getting Started</a>
+ </li>
+
+ <li>
+
+ <a href="../../construct.html" title="Repository Construction">
+ <i class="none"></i>
+ Repository Construction</a>
+ </li>
+
+ <li>
+
+ <a href="../../osgi_config.html" title="Configuring Oak">
+ <i class="none"></i>
+ Configuring Oak</a>
+ </li>
+
+ <li>
+
+ <a href="../../command_line.html" title="Command Line Tools">
+ <i class="none"></i>
+ Command Line Tools</a>
+ </li>
+
+ <li>
+
+ <a href="../../differences.html" title="Differences to Jackrabbit 2">
+ <i class="none"></i>
+ Differences to Jackrabbit 2</a>
+ </li>
+
+ <li>
+
+ <a href="../../known_issues.html" title="Known Issues">
+ <i class="none"></i>
+ Known Issues</a>
+ </li>
+
+ <li>
+
+ <a href="../../dos_and_donts.html" title="Dos and Don'ts">
+ <i class="none"></i>
+ Dos and Don'ts</a>
+ </li>
+
+ <li>
+
+ <a href="../../coldstandby/coldstandby.html" title="Cold Standby">
+ <i class="none"></i>
+ Cold Standby</a>
+ </li>
+
+ <li>
+
+ <a href="../../FAQ.html" title="FAQ">
+ <i class="none"></i>
+ FAQ</a>
+ </li>
+ <li class="nav-header">Developing Oak</li>
+
+ <li>
+
+ <a href="../../dev_getting_started.html" title="Getting Started">
+ <i class="none"></i>
+ Getting Started</a>
+ </li>
+
+ <li>
+
+ <a href="../../participating.html" title="Participating">
+ <i class="none"></i>
+ Participating</a>
+ </li>
+
+ <li>
+
+ <a href="../../apidocs/index.html" title="API Docs">
+ <i class="none"></i>
+ API Docs</a>
+ </li>
+
+ <li>
+
+ <a href="../../attribution.html" title="Attribution">
+ <i class="none"></i>
+ Attribution</a>
+ </li>
+ <li class="nav-header">Links</li>
+
+ <li>
+
+ <a href="http://jackrabbit.apache.org/oak" class="externalLink" title="Apache Jackrabbit Oak">
+ <i class="none"></i>
+ Apache Jackrabbit Oak</a>
+ </li>
+
+ <li>
+
+ <a href="http://jackrabbit.apache.org/" class="externalLink" title="Apache Jackrabbit">
+ <i class="none"></i>
+ Apache Jackrabbit</a>
+ </li>
+ </ul>
+
+
+
+ <hr class="divider" />
+
+ <div id="poweredBy">
+
+ <script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>
+
+
+ <div class="g-plusone" data-href="http://jackrabbit.apache.org/oak/docs/" data-size="tall" ></div>
+
+ <div class="clear"></div>
+ <div class="clear"></div>
+ <div class="clear"></div>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="builtBy" alt="Built by Maven" src="../../images/logos/maven-feather.png" />
+ </a>
+ </div>
+ </div>
+ </div>
+
+
+ <div id="bodyColumn" class="span9" >
+
+ <!-- Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License. --><div class="section">
+<div class="section">
+<h3>Privilege Management : Mapping Privileges to Items<a name="Privilege_Management_:_Mapping_Privileges_to_Items"></a></h3>
+<p>The following table allows to identify which items will be affected by the invididual built in privileges.</p>
+<p>Note: the term <i>regular</i> is used on contrast to <i>protected</i> items that are written using special API calls and thus mandate special privileges or are maintained by the system only and cannot be modified by the API consumer.</p>
+<div class="section">
+<h4>Read<a name="Read"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>rep:readNodes </td>
+
+<td>all nodes except for access control content </td>
+ </tr>
+
+<tr class="a">
+
+<td>rep:readProperties </td>
+
+<td>all properties except for access control content </td>
+ </tr>
+
+<tr class="b">
+
+<td>jcr:readAccessControl </td>
+
+<td>all items defining access control content (see below) </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Properties<a name="Writing_Properties"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>rep:addProperties </td>
+
+<td>creation of new regular properties </td>
+ </tr>
+
+<tr class="a">
+
+<td>rep:alterProperties </td>
+
+<td>changing existing regular properties </td>
+ </tr>
+
+<tr class="b">
+
+<td>rep:removeProperties </td>
+
+<td>removing existing regular properties </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Nodes<a name="Writing_Nodes"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>jcr:addChildNodes </td>
+
+<td>granted on parent to create new regular child nodes </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:removeChildNodes </td>
+
+<td>granted on parent to remove regular child nodes </td>
+ </tr>
+
+<tr class="b">
+
+<td>rep:removeNode </td>
+
+<td>required to be granted on regular nodes for removal </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:nodeTypeManagement</td>
+
+<td>explicitly setting or modifying node type information on a regular (non-protected) node; affected properties are <tt>jcr:primaryType</tt>, <tt>jcr:mixinTypes</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Access Control Management<a name="Access_Control_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>jcr:readAccessControl </td>
+
+<td>all items defining access control content (1) </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:modifyAccessControl </td>
+
+<td>all items defining access control content (1) </td>
+ </tr>
+
+<tr class="b">
+
+<td>rep:privilegeManagement </td>
+
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:privileges</tt> </td>
+ </tr>
+ </tbody>
+</table>
+<p>(1) in Oak reading/writing nodes with the following node types: <tt>rep:Policy</tt>, <tt>rep:ACL</tt>, <tt>rep:ACE</tt>, <tt>rep:GrantACE</tt>, <tt>rep:DenyACE</tt>, <tt>rep:Restrictions</tt>, <tt>rep:CugPolicy</tt> and all protected items defined therein</p></div>
+<div class="section">
+<h4>Other Session and Workspace Operations<a name="Other_Session_and_Workspace_Operations"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>jcr:versionManagement </td>
+
+<td>all items defining version content (2) </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:lockManagement </td>
+
+<td>Properties <tt>jcr:lockIsDeep</tt>, <tt>jcr:lockOwner</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td>jcr:lifecycleManagement </td>
+
+<td><tt>jcr:lifecyclePolicy</tt>, <tt>jcr:currentLifecycleState</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:retentionManagement </td>
+
+<td>implementation specific, in Jackrabbit 2.x the following properties: <tt>rep:hold</tt>, <tt>rep:retentionPolicy</tt>, Oak: NA </td>
+ </tr>
+
+<tr class="b">
+
+<td>rep:userManagement </td>
+
+<td>all items defining user/group content (3) </td>
+ </tr>
+
+<tr class="a">
+
+<td>rep:indexDefinitionManagement </td>
+
+<td>implementation specific; in Oak trees starting with an <tt>oak:index</tt> node </td>
+ </tr>
+ </tbody>
+</table>
+<p>(2) granting jcr:versionManagement privilege at a given versionable node will allow writing items through JCR version management API which writes below <tt>/jcr:system/jcr:versionStorage</tt>, <tt>/jcr:system/jcr:activities</tt>, <tt>/jcr:system/jcr:configurations</tt> and the following properties both in the storage(s) and with the versionable node: <tt>jcr:activity</tt>, <tt>jcr:activityTitle</tt>, <tt>jcr:baseVersion</tt>, <tt>jcr:childVersionHistory</tt>, <tt>jcr:configuration</tt>, <tt>jcr:copiedFrom</tt>, <tt>jcr:frozenMixinTypes</tt>, <tt>jcr:frozenPrimaryType</tt>, <tt>jcr:frozenUuid</tt>, <tt>jcr:isCheckedOut</tt>, <tt>jcr:mergeFailed</tt>, <tt>jcr:predecessors</tt>,<tt>jcr:successors</tt>,<tt>jcr:root</tt>,<tt>jcr:versionableUuid</tt>, <tt>jcr:versionHistory</tt> (3) in Oak creating nodes with the following primary types: <tt>rep:User</tt>, <tt>rep:SystemUser</tt>, <tt>rep:Group</tt>, <tt>rep:Impersonatable</tt>, <tt>rep:Members</tt>, <tt>rep:MemberReferences</tt>, <tt>
rep:MemberReferencesList</tt>, <tt>rep:Password</tt> and all protected properties defined therein</p></div>
+<div class="section">
+<h4>Repository Operations<a name="Repository_Operations"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>Privilege </th>
+
+<th>Affected Items </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td>jcr:namespaceManagement </td>
+
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:namespaces</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:nodeTypeDefinitionManagement </td>
+
+<td>implementation specific; in Oak everything below <tt>/jcr:system/jcr:nodeTypes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td>rep:privilegeManagement </td>
+
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:privileges</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td>jcr:workspaceManagement </td>
+
+<td>NA </td>
+ </tr>
+ </tbody>
+</table></div></div></div>
+ </div>
+ </div>
+ </div>
+
+ <hr/>
+
+ <footer>
+ <div class="container-fluid">
+ <div class="row span12">Copyright © 2012-2015
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+
+
+
+
+
+
+
+ <div id="ohloh" class="pull-right">
+ <script type="text/javascript" src="http://www.ohloh.net/p/jackrabbit-oak/widgets/project_thin_badge.js"></script>
+ </div>
+ </div>
+ </footer>
+ </body>
+</html>
\ No newline at end of file
Propchange: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html
------------------------------------------------------------------------------
svn:eol-style = native
Added: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html?rev=1686825&view=auto
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html (added)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html Mon Jun 22 10:12:08 2015
@@ -0,0 +1,1771 @@
+<!DOCTYPE html>
+<!--
+ | Generated by Apache Maven Doxia at 2015-06-22
+ | Rendered using Apache Maven Fluido Skin 1.3.0
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta charset="UTF-8" />
+ <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
+ <meta http-equiv="Content-Language" content="en" />
+ <title>Jackrabbit Oak - Privilege Management : Mapping API Calls to Privileges</title>
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
+ <link rel="stylesheet" href="../../css/site.css" />
+ <link rel="stylesheet" href="../../css/print.css" media="print" />
+
+
+ <script type="text/javascript" src="../../js/apache-maven-fluido-1.3.0.min.js"></script>
+
+
+ </head>
+ <body class="topBarEnabled">
+
+
+
+
+
+
+ <a href="http://github.com/apache/jackrabbit-oak">
+ <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
+ src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
+ alt="Fork me on GitHub">
+ </a>
+
+
+
+
+
+ <div id="topbar" class="navbar navbar-fixed-top ">
+ <div class="navbar-inner">
+ <div class="container-fluid">
+ <a data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar">
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ </a>
+
+ <a class="brand" href="../../" title="Oak logo">
+
+
+ <img src="../../oak_logo.png" alt="Oak logo" />
+
+ </a>
+
+ <ul class="nav">
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Overview <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../index.html" title="Jackrabbit Oak">Jackrabbit Oak</a>
+</li>
+
+ <li> <a href="../../license.html" title="License">License</a>
+</li>
+
+ <li> <a href="../../downloads.html" title="Downloads">Downloads</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Concepts and Architecture <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../architecture/overview.html" title="Overview">Overview</a>
+</li>
+
+ <li> <a href="../../architecture/nodestate.html" title="The Node State Model">The Node State Model</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a>
+</li>
+
+ <li> <a href="../../oak_api/overview.html" title="Oak API">Oak API</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Features and Plugins <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../nodestore/overview.html" title="Node Storage">Node Storage</a>
+</li>
+
+ <li> <a href="../../plugins/blobstore.html" title="Blob Storage">Blob Storage</a>
+</li>
+
+ <li> <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">DocumentNodeStore</a>
+</li>
+
+ <li> <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">SegmentNodeStore</a>
+</li>
+
+ <li> <a href="../../query/query.html" title="Query">Query</a>
+</li>
+
+ <li> <a href="../../query/lucene.html" title="Index - Lucene">Index - Lucene</a>
+</li>
+
+ <li> <a href="../../query/solr.html" title="Index - Solr">Index - Solr</a>
+</li>
+
+ <li> <a href="../../security/overview.html" title="Security">Security</a>
+</li>
+
+ <li> <a href="../../clustering.html" title="Clustering">Clustering</a>
+</li>
+
+ <li> <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">Persistent Cache</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Using Oak <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../use_getting_started.html" title="Getting Started">Getting Started</a>
+</li>
+
+ <li> <a href="../../construct.html" title="Repository Construction">Repository Construction</a>
+</li>
+
+ <li> <a href="../../osgi_config.html" title="Configuring Oak">Configuring Oak</a>
+</li>
+
+ <li> <a href="../../command_line.html" title="Command Line Tools">Command Line Tools</a>
+</li>
+
+ <li> <a href="../../differences.html" title="Differences to Jackrabbit 2">Differences to Jackrabbit 2</a>
+</li>
+
+ <li> <a href="../../known_issues.html" title="Known Issues">Known Issues</a>
+</li>
+
+ <li> <a href="../../dos_and_donts.html" title="Dos and Don'ts">Dos and Don'ts</a>
+</li>
+
+ <li> <a href="../../coldstandby/coldstandby.html" title="Cold Standby">Cold Standby</a>
+</li>
+
+ <li> <a href="../../FAQ.html" title="FAQ">FAQ</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Developing Oak <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="../../dev_getting_started.html" title="Getting Started">Getting Started</a>
+</li>
+
+ <li> <a href="../../participating.html" title="Participating">Participating</a>
+</li>
+
+ <li> <a href="../../apidocs/index.html" title="API Docs">API Docs</a>
+</li>
+
+ <li> <a href="../../attribution.html" title="Attribution">Attribution</a>
+</li>
+ </ul>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">Links <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+
+ <li> <a href="http://jackrabbit.apache.org/oak" title="Apache Jackrabbit Oak">Apache Jackrabbit Oak</a>
+</li>
+
+ <li> <a href="http://jackrabbit.apache.org/" title="Apache Jackrabbit">Apache Jackrabbit</a>
+</li>
+ </ul>
+ </li>
+ </ul>
+
+
+
+
+ </div>
+
+ </div>
+ </div>
+ </div>
+
+ <div class="container-fluid">
+ <div id="banner">
+ <div class="pull-left">
+ <div id="bannerLeft">
+ <h2>Oak Documentation</h2>
+ </div>
+ </div>
+ <div class="pull-right"> </div>
+ <div class="clear"><hr/></div>
+ </div>
+
+ <div id="breadcrumbs">
+ <ul class="breadcrumb">
+
+
+ <li id="publishDate">Last Published: 2015-06-22</li>
+ <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
+
+
+
+
+ </ul>
+ </div>
+
+
+ <div class="row-fluid">
+ <div id="leftColumn" class="span3">
+ <div class="well sidebar-nav">
+
+
+ <ul class="nav nav-list">
+ <li class="nav-header">Overview</li>
+
+ <li>
+
+ <a href="../../index.html" title="Jackrabbit Oak">
+ <i class="none"></i>
+ Jackrabbit Oak</a>
+ </li>
+
+ <li>
+
+ <a href="../../license.html" title="License">
+ <i class="none"></i>
+ License</a>
+ </li>
+
+ <li>
+
+ <a href="../../downloads.html" title="Downloads">
+ <i class="none"></i>
+ Downloads</a>
+ </li>
+ <li class="nav-header">Concepts and Architecture</li>
+
+ <li>
+
+ <a href="../../architecture/overview.html" title="Overview">
+ <i class="none"></i>
+ Overview</a>
+ </li>
+
+ <li>
+
+ <a href="../../architecture/nodestate.html" title="The Node State Model">
+ <i class="none"></i>
+ The Node State Model</a>
+ </li>
+ <li class="nav-header">Main APIs</li>
+
+ <li>
+
+ <a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API">
+ <i class="none"></i>
+ JCR API</a>
+ </li>
+
+ <li>
+
+ <a href="../../oak_api/overview.html" title="Oak API">
+ <i class="none"></i>
+ Oak API</a>
+ </li>
+ <li class="nav-header">Features and Plugins</li>
+
+ <li>
+
+ <a href="../../nodestore/overview.html" title="Node Storage">
+ <i class="none"></i>
+ Node Storage</a>
+ </li>
+
+ <li>
+
+ <a href="../../plugins/blobstore.html" title="Blob Storage">
+ <i class="none"></i>
+ Blob Storage</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">
+ <i class="none"></i>
+ DocumentNodeStore</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">
+ <i class="none"></i>
+ SegmentNodeStore</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/query.html" title="Query">
+ <i class="none"></i>
+ Query</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/lucene.html" title="Index - Lucene">
+ <i class="none"></i>
+ Index - Lucene</a>
+ </li>
+
+ <li>
+
+ <a href="../../query/solr.html" title="Index - Solr">
+ <i class="none"></i>
+ Index - Solr</a>
+ </li>
+
+ <li>
+
+ <a href="../../security/overview.html" title="Security">
+ <i class="none"></i>
+ Security</a>
+ </li>
+
+ <li>
+
+ <a href="../../clustering.html" title="Clustering">
+ <i class="none"></i>
+ Clustering</a>
+ </li>
+
+ <li>
+
+ <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">
+ <i class="none"></i>
+ Persistent Cache</a>
+ </li>
+ <li class="nav-header">Using Oak</li>
+
+ <li>
+
+ <a href="../../use_getting_started.html" title="Getting Started">
+ <i class="none"></i>
+ Getting Started</a>
+ </li>
+
+ <li>
+
+ <a href="../../construct.html" title="Repository Construction">
+ <i class="none"></i>
+ Repository Construction</a>
+ </li>
+
+ <li>
+
+ <a href="../../osgi_config.html" title="Configuring Oak">
+ <i class="none"></i>
+ Configuring Oak</a>
+ </li>
+
+ <li>
+
+ <a href="../../command_line.html" title="Command Line Tools">
+ <i class="none"></i>
+ Command Line Tools</a>
+ </li>
+
+ <li>
+
+ <a href="../../differences.html" title="Differences to Jackrabbit 2">
+ <i class="none"></i>
+ Differences to Jackrabbit 2</a>
+ </li>
+
+ <li>
+
+ <a href="../../known_issues.html" title="Known Issues">
+ <i class="none"></i>
+ Known Issues</a>
+ </li>
+
+ <li>
+
+ <a href="../../dos_and_donts.html" title="Dos and Don'ts">
+ <i class="none"></i>
+ Dos and Don'ts</a>
+ </li>
+
+ <li>
+
+ <a href="../../coldstandby/coldstandby.html" title="Cold Standby">
+ <i class="none"></i>
+ Cold Standby</a>
+ </li>
+
+ <li>
+
+ <a href="../../FAQ.html" title="FAQ">
+ <i class="none"></i>
+ FAQ</a>
+ </li>
+ <li class="nav-header">Developing Oak</li>
+
+ <li>
+
+ <a href="../../dev_getting_started.html" title="Getting Started">
+ <i class="none"></i>
+ Getting Started</a>
+ </li>
+
+ <li>
+
+ <a href="../../participating.html" title="Participating">
+ <i class="none"></i>
+ Participating</a>
+ </li>
+
+ <li>
+
+ <a href="../../apidocs/index.html" title="API Docs">
+ <i class="none"></i>
+ API Docs</a>
+ </li>
+
+ <li>
+
+ <a href="../../attribution.html" title="Attribution">
+ <i class="none"></i>
+ Attribution</a>
+ </li>
+ <li class="nav-header">Links</li>
+
+ <li>
+
+ <a href="http://jackrabbit.apache.org/oak" class="externalLink" title="Apache Jackrabbit Oak">
+ <i class="none"></i>
+ Apache Jackrabbit Oak</a>
+ </li>
+
+ <li>
+
+ <a href="http://jackrabbit.apache.org/" class="externalLink" title="Apache Jackrabbit">
+ <i class="none"></i>
+ Apache Jackrabbit</a>
+ </li>
+ </ul>
+
+
+
+ <hr class="divider" />
+
+ <div id="poweredBy">
+
+ <script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>
+
+
+ <div class="g-plusone" data-href="http://jackrabbit.apache.org/oak/docs/" data-size="tall" ></div>
+
+ <div class="clear"></div>
+ <div class="clear"></div>
+ <div class="clear"></div>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="builtBy" alt="Built by Maven" src="../../images/logos/maven-feather.png" />
+ </a>
+ </div>
+ </div>
+ </div>
+
+
+ <div id="bodyColumn" class="span9" >
+
+ <!-- Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License. --><div class="section">
+<div class="section">
+<h3>Privilege Management : Mapping API Calls to Privileges<a name="Privilege_Management_:_Mapping_API_Calls_to_Privileges"></a></h3>
+<p>The following table allows to identify which API calls require which type of privilege(s)</p>
+<div class="section">
+<h4>Read<a name="Read"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Session.itemExists</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.getItem</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.nodeExists</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.nodeExists</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.getNode</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.getRootNode</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.getNodeByUUID</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.getNodeByIdentifier</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.getNode</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.propertyExists</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.getProperty</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Item.getParent</tt> </td>
+
+<td><tt>rep:readNodes</tt> on parent </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Item.getAncestor</tt> </td>
+
+<td><tt>rep:readNodes</tt> on ancestor </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.hasNode</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.hasNodes</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getNode</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.getNodes</tt> </td>
+
+<td><tt>rep:readNodes</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.hasProperty</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.hasProperties</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getProperty</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.getProperties</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getUUID</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.getIdentifier</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getReferences</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.getWeakReferences</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getPrimaryItem</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.getPrimaryNodeType</tt> </td>
+
+<td><tt>rep:readProperties</tt> on jcr:primaryType </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.getMixinNodeTypes</tt> </td>
+
+<td><tt>rep:readProperties</tt> on jcr:mixinTypes </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Property.getValue</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Property.getValues</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Property.get*</tt> </td>
+
+<td><tt>rep:readProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Property.getNode</tt> </td>
+
+<td><tt>rep:readProperties</tt>, <tt>rep:readNodes</tt> on ref-target </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Session.exportSystemView</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.exportDocumentView</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Properties<a name="Writing_Properties"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Node.setProperty</tt> (new) </td>
+
+<td><tt>rep:addProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.setProperty</tt> (existing) </td>
+
+<td><tt>rep:alterProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Property.setValue</tt> </td>
+
+<td><tt>rep:alterProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Property.remove</tt> </td>
+
+<td><tt>rep:removeProperties</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.setProperty(String, null)</tt> </td>
+
+<td><tt>rep:removeProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>JackrabbitSession.removeItem</tt> (item is a property) </td>
+
+<td><tt>rep:removeProperties</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Nodes<a name="Writing_Nodes"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Node.addNode(String)</tt> </td>
+
+<td><tt>jcr:addChildNodes</tt> (on parent) </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.remove</tt> </td>
+
+<td><tt>jcr:removeChildNodes</tt> (on parent), <tt>jcr:removeNode</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>JackrabbitSession.removeItem</tt> (if item is a node) </td>
+
+<td><tt>jcr:removeChildNodes</tt> (on parent), <tt>jcr:removeNode</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.addNode(String, String)</tt> </td>
+
+<td><tt>jcr:addChildNodes</tt> (on parent), <tt>jcr:nodeTypeManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.setPrimaryType</tt> </td>
+
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.addMixin</tt> </td>
+
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Node.removeMixin</tt> </td>
+
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Node.orderBefore</tt> </td>
+
+<td><tt>jcr:addChildNodes</tt> and <tt>jcr:removeChildNodes</tt> (on parent) </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Move, Copy and Import<a name="Move_Copy_and_Import"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Session.move</tt> </td>
+
+<td><tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Workspace.move</tt> </td>
+
+<td><tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Workspace.copy</tt> </td>
+
+<td>same privileges as if items would be created using regular API calls </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Session.importXml</tt> </td>
+
+<td>same privileges as if items would be created using regular API calls </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Workspace.importXml</tt> </td>
+
+<td>same privileges as if items would be created using regular API calls </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Version Management<a name="Version_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>VersionManager.isCheckedOut</tt> </td>
+
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:isCheckedOut</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.getVersionHistory</tt> </td>
+
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:versionHistory</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.getBaseVersion</tt> </td>
+
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:baseVersion</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.checkin</tt> </td>
+
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.checkout</tt> </td>
+
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.checkpoint</tt> </td>
+
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.restore</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.restoreByLabel</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.merge</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.cancelMerge</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.doneMerge</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.createConfiguration</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.setActivity</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionManager.createActivity</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionManager.removeActivity</tt> </td>
+
+<td><i>TODO</i> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>VersionHistory.*</tt> (read) </td>
+
+<td><tt>rep:readNodes</tt> on versionable node </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>VersionHistory.removeVersion</tt> </td>
+
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Version.*</tt> (read) </td>
+
+<td><tt>rep:readNodes</tt> on versionable node </td>
+ </tr>
+ </tbody>
+</table>
+<p>NOTE: since Oak 1.0 read/write access to version storage is defined by accessibility of the versionable node and <i>not</i> to the version store items.</p></div>
+<div class="section">
+<h4>Lock Management<a name="Lock_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>LockManager.getLock</tt> = <tt>Node.getLock</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>LockManager.isLocked</tt> = <tt>Node.isLocked</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>LockManager.holdsLock</tt> = <tt>Node.holdsLock</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>LockManager.lock</tt> = <tt>Node.lock</tt> </td>
+
+<td><tt>jcr:lockManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>LockManager.unlock</tt> = <tt>Node.unlock</tt> </td>
+
+<td><tt>jcr:lockManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Access Control Management<a name="Access_Control_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>AccessControlManager.getApplicablePolicies</tt> </td>
+
+<td><tt>jcr:readAccessControl</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>AccessControlManager.getPolicies</tt> </td>
+
+<td><tt>jcr:readAccessControl</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>AccessControlManager.getEffectivePolicies</tt> </td>
+
+<td><tt>jcr:readAccessControl</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>AccessControlManager.setPolicy</tt> </td>
+
+<td><tt>jcr:modifyAccessControl</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>AccessControlManager.removePolicy</tt> </td>
+
+<td><tt>jcr:modifyAccessControl</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>PrivilegeManager.registerPrivilege</tt> </td>
+
+<td><tt>rep:privilegeManagent</tt> at ‘null’ path </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>User Management<a name="User_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>UserManager.getAuthorizable</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>UserManager.findAuthorizable</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>UserManager.createUser</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>UserManager.createSystemUser</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>UserManager.createGroup</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>User.isDisabled</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>User.getDisabledReason</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>User.disable</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>User.changePassword</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>User.getCredentials</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>User.getImpersonation</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Impersonation.getImpersonators</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Impersonation.allows</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Impersonation.grantImpersonation</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Impersonation.revokeImpersonation</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Group.getDeclaredMembers</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Group.getMembers</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Group.isDeclaredMember</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Group.isMember</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Group.addMember</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Group.removeMember</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.getID</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.getPrincipal</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.getPath</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.declaredMemberOf</tt> </td>
+
+<td><tt>jcr:read</tt> (on groups listing this user/group as member) </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.memberOf</tt> </td>
+
+<td><tt>jcr:read</tt> (on groups listing this user/group as member) </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.remove</tt> </td>
+
+<td><tt>rep:userManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.getPropertyNames</tt> </td>
+
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.hasProperty</tt> </td>
+
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.getProperty</tt> </td>
+
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+
+<td> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.setProperty</tt> (no relPath) </td>
+
+<td><tt>rep:addProperties</tt> and/or <tt>rep:alterProperties</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Authorizable.setProperty</tt> (with relPath </td>
+
+<td><tt>rep:addProperties</tt> and/or <tt>rep:alterProperties</tt>, <tt>jcr:addChildNodes</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>Authorizable.removeProperty</tt> </td>
+
+<td><tt>rep:removeProperties</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>LifeCycle Management<a name="LifeCycle_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Node.followLifecycleTransition</tt> </td>
+
+<td><tt>jcr:lifecycleManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Retention Management<a name="Retention_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>RetentionManager.getHolds</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>RetentionManager.getRetentionPolicy</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>RetentionManager.addHold</tt> </td>
+
+<td><tt>jcr:retentionManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>RetentionManager.removeHold</tt> </td>
+
+<td><tt>jcr:retentionManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>RetentionManager.setRetentionPolicy</tt> </td>
+
+<td><tt>jcr:retentionManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>RetentionManager.removeRetentionPolicy</tt> </td>
+
+<td><tt>jcr:retentionManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Namespace Management<a name="Namespace_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>NamespaceRegistry.getPrefix</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NamespaceRegistry.getPrefixes</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NamespaceRegistry.getURI</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NamespaceRegistry.getURIs</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NamespaceRegistry.registerNamespace</tt> </td>
+
+<td><tt>jcr:namespaceManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NamespaceRegistry.unregisterNamespace</tt> </td>
+
+<td><tt>jcr:namespaceManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>NodeType Management<a name="NodeType_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.hasNodeType</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.getNodeType</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.getAllNodeTypes</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.getPrimaryNodeTypes</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.getMixinNodeTypes</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.createNodeTypeTemplate</tt> </td>
+
+<td>NA </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.createNodeDefinitionTemplate</tt> </td>
+
+<td>NA </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.createPropertyDefinitionTemplate</tt> </td>
+
+<td>NA </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.registerNodeType</tt> </td>
+
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.registerNodeTypes</tt> </td>
+
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>NodeTypeManager.unregisterNodeType</tt> </td>
+
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>NodeTypeManager.unregisterNodeTypes</tt> </td>
+
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Privilege Management<a name="Privilege_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>PrivilegeManager.getRegisteredPrivileges</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>PrivilegeManager.getPrivilege</tt> </td>
+
+<td><tt>jcr:read</tt> </td>
+ </tr>
+
+<tr class="b">
+
+<td><tt>PrivilegeManager.registerPrivilege</tt> </td>
+
+<td><tt>rep:privilegeManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div>
+<div class="section">
+<h4>Workspace Management<a name="Workspace_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+ <thead>
+
+<tr class="a">
+
+<th>API Call </th>
+
+<th>Privilege(s) </th>
+ </tr>
+ </thead>
+ <tbody>
+
+<tr class="b">
+
+<td><tt>Workspace.createWorkspace</tt> </td>
+
+<td><tt>jcr:workspaceManagement</tt> </td>
+ </tr>
+
+<tr class="a">
+
+<td><tt>Workspace.deleteWorkspace</tt> </td>
+
+<td><tt>jcr:workspaceManagement</tt> </td>
+ </tr>
+ </tbody>
+</table></div></div></div>
+ </div>
+ </div>
+ </div>
+
+ <hr/>
+
+ <footer>
+ <div class="container-fluid">
+ <div class="row span12">Copyright © 2012-2015
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+
+
+
+
+
+
+
+ <div id="ohloh" class="pull-right">
+ <script type="text/javascript" src="http://www.ohloh.net/p/jackrabbit-oak/widgets/project_thin_badge.js"></script>
+ </div>
+ </div>
+ </footer>
+ </body>
+</html>
\ No newline at end of file
Propchange: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html
------------------------------------------------------------------------------
svn:eol-style = native
Modified: jackrabbit/site/live/oak/docs/security/user.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user.html (original)
+++ jackrabbit/site/live/oak/docs/security/user.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - User Management</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/authorizableaction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizableaction.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizableaction.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizableaction.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authorizable Actions</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authorizable Node Name Generation</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/differences.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/differences.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - User Management : Differences to Jackrabbit 2.x</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/expiry.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/expiry.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/expiry.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/expiry.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Password Expiry and Force Initial Password Change</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/membership.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/membership.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/membership.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/membership.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Group Membership</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/user/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/query.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/query.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/query.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Searching Users and Groups</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/use_getting_started.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/use_getting_started.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/use_getting_started.html (original)
+++ jackrabbit/site/live/oak/docs/use_getting_started.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20150616" />
+ <meta name="Date-Revision-yyyymmdd" content="20150622" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Runnable jar</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2015-06-16</li>
+ <li id="publishDate">Last Published: 2015-06-22</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>