You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Bertrand Delacretaz (Jira)" <ji...@apache.org> on 2021/06/15 13:10:00 UTC
[jira] [Updated] (SLING-10281) Revert SLING-9449: set principal ACL
should throw an Exception it it fails
[ https://issues.apache.org/jira/browse/SLING-10281?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bertrand Delacretaz updated SLING-10281:
----------------------------------------
Summary: Revert SLING-9449: set principal ACL should throw an Exception it it fails (was: Revert changes from SLING-9449)
> Revert SLING-9449: set principal ACL should throw an Exception it it fails
> --------------------------------------------------------------------------
>
> Key: SLING-10281
> URL: https://issues.apache.org/jira/browse/SLING-10281
> Project: Sling
> Issue Type: Bug
> Components: Repoinit
> Affects Versions: Repoinit JCR 1.1.34
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: Repoinit JCR 1.1.36
>
> Time Spent: 6h
> Remaining Estimate: 0h
>
> As highlighted in the last comment of SLING-9449, repoinit should use exceptions when some statements cannot be applied (as that leads to an undesired repository state). In the worst case it could lead to privilege escalation
--
This message was sent by Atlassian Jira
(v8.3.4#803005)