[jira] [Comment Edited] (OAK-9494) Check if a privilege name is included in a set/array of Privileges obtained from AccessControlManager.getPrivileges

["Angela Schreiber (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OAK-9494?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17384382#comment-17384382 ] 

Angela Schreiber edited comment on OAK-9494 at 7/21/21, 7:15 AM:
-----------------------------------------------------------------

after a second thought, i believe adding additional methods to {{JackrabbitAccessControlManager}} would be better..... e.g. something like 
{{JackrabbitAccessControlManager.getPrivilegeCollection(String absPath)}}, where {{PrivilegeCollection}} would essentially be a 'wrapper' around an array of privileges, without having to build the privilege objects unless explicitly requested. in addition that {{PrivilegeCollection}} would allow to to evaluate if certain privileges are included by specifying names only. if needed the new interface could easily be extended later to also perform tasks like {{getPrivilegeNames}} or {{getAggregatedPrivilegeNames()}}.


was (Author: anchela):
after a second thought, i believe adding additional methods to {{JackrabbitAccessControlManager}} would be better..... e.g. something like 
{{JackrabbitAccessControlManager.getPrivilegeCollection(String absPath)}}, where {{PrivilegeCollection}} would essentially be a 'wrapper' around an array of privileges, without having to build the privilege objects unless explicitly requested. in addition that {PrivilegeCollection}} would allow to to evaluate if certain privileges are included by specifying names only. if needed the new interface could easily be extended later to also perform tasks like {{getPrivilegeNames}} or {{getAggregatedPrivilegeNames()}}.

> Check if a privilege name is included in a set/array of Privileges obtained from AccessControlManager.getPrivileges
> -------------------------------------------------------------------------------------------------------------------
>
>                 Key: OAK-9494
>                 URL: https://issues.apache.org/jira/browse/OAK-9494
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: jackrabbit-api, security
>            Reporter: Joerg Hoh
>            Assignee: Angela Schreiber
>            Priority: Major
>
> I have a case where I need to check for a session if individual privileges are available for a specific node. For performance reasons I want to avoid to execute multiple calls to {{accessControlManager.hasPrivilege(...)}}, but get all Privileges of that node once and the set various flags based on the presene of certain privileges or not.
> I want to use something like this:
> {code}
> Set<String> applicablePrivilegeNames = ...(accessControlManager.getPrivileges(path))...
> boolean canAddChildNodes = applicablePrivilegeNames.contains(Privilege.JCR_ADD_CHILD_NODES);
> boolean canWrite = applicablePrivilegeNames.contains(Privilege.WRITE);
> {code}
> It should work with aggregates as well.
> Right now it's a bit problematic because {{privilege.getName()}} resolves to something like {{jcr:read}}, while the value of {{Privilege.JCR_READ}} is {{\{http://www.jcp.org/jcr/1.0}read}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)