You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Robert Munteanu (Jira)" <ji...@apache.org> on 2020/10/02 15:02:00 UTC
[jira] [Resolved] (SLING-9786) Use pre-authentication for system
users
[ https://issues.apache.org/jira/browse/SLING-9786?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Munteanu resolved SLING-9786.
------------------------------------
Resolution: Fixed
Fixed with https://github.com/apache/sling-org-apache-sling-starter/pull/15
> Use pre-authentication for system users
> ---------------------------------------
>
> Key: SLING-9786
> URL: https://issues.apache.org/jira/browse/SLING-9786
> Project: Sling
> Issue Type: Improvement
> Components: Starter
> Reporter: Robert Munteanu
> Assignee: Robert Munteanu
> Priority: Major
> Fix For: Starter 12
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Oak [pre-authenticated login|https://jackrabbit.apache.org/oak/docs/security/authentication/preauthentication.html] without repository involvement presents a number of advantages:
> - it is faster since the repository is not involved
> - allows mapping a single principal to the repositories of multiple service users, making ACLs easier to define in a fine-grained manner
> We should therefore switch the starter to the pre-auth setup for service users.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)