[jira] [Created] (OAK-4086) Group membership not verified during permission verification

["Marco Piovesana (JIRA)" <ji...@apache.org>]

Marco Piovesana created OAK-4086:
------------------------------------

             Summary: Group membership not verified during permission verification
                 Key: OAK-4086
                 URL: https://issues.apache.org/jira/browse/OAK-4086
             Project: Jackrabbit Oak
          Issue Type: Bug
          Components: security
    Affects Versions: 1.3.16
            Reporter: Marco Piovesana


I have a group called "MyUsers" containing a user called "marco". I've created a folder called "testfolder" with admin account and i granted read permission to the "MyUsers" group:
{code:java}
Node testfolder = adminSession.getNode("/testfolder"); 
boolean allow = AccessControlUtils.allow(testfolder, myUsersGroup.getPrincipal(), new String[]{Privilege.JCR_READ}); 
{code}

When I login as "marco", if i try to find that folder i get an error saying that the folder doesn't exists (user does not have tthe permission to read it). It works only if I grant the READ permission directly to the user.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)