You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by an...@apache.org on 2014/02/03 14:16:53 UTC
svn commit: r1563877 -
/jackrabbit/site/live/oak/docs/differences_permission.html
Author: angela
Date: Mon Feb 3 13:16:52 2014
New Revision: 1563877
URL: http://svn.apache.org/r1563877
Log:
OAK-936: Site checkin for project Oak Documentation-0.16-SNAPSHOT
Modified:
jackrabbit/site/live/oak/docs/differences_permission.html
Modified: jackrabbit/site/live/oak/docs/differences_permission.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/differences_permission.html?rev=1563877&r1=1563876&r2=1563877&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/differences_permission.html (original)
+++ jackrabbit/site/live/oak/docs/differences_permission.html Mon Feb 3 13:16:52 2014
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2014-01-30
+ | Generated by Apache Maven Doxia at 2014-02-03
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20140130" />
+ <meta name="Date-Revision-yyyymmdd" content="20140203" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permission Evaluation : Differences wrt Jackrabbit 2.x</title>
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -154,7 +154,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2014-01-30</li>
+ <li id="publishDate">Last Published: 2014-02-03</li>
<li class="divider">|</li> <li id="projectVersion">Version: 0.16-SNAPSHOT</li>
@@ -406,7 +406,16 @@
<p>Due to the nature of the diff mechanism in Oak it is not possible to distinguish between <tt>JackrabbitNode#rename</tt> and a move with subsequent reordering. Consequently the permission evaluation will no longer apply the special handling for the renaming as it was present in Jackrabbit 2.x (renaming just required the ability to modify the child collection of the parent node).</p></div>
<div class="section">
<h5>Move<a name="Move"></a></h5>
-<p><i>TODO: permission evaluation with move is not yet implemented <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-710">OAK-710</a></i></p></div>
+<p>Due to the nature of the diff mechanism in Oak it is no longer possible to treat move operations the same way as it was implemented in Jackrabbit 2.x. The current permission evaluation attempts to provide a best-effort handling to achieve a similar behavior that it was present in Jackrabbit 2.x.</p>
+<p>The current implementation has the following limitations with respect to multiple move operations within a given set of transient operations:</p>
+
+<ul>
+
+<li>Move operations that replace an node that has been moved away will not be detected as modification by the diff mechanism and regular permission checks for on the subtree will be performed.</li>
+
+<li>Moving an ancestor of a node that has been moved will only detect the second move and will enforce regular permissions checks on the child that has been moved in a first step.</li>
+</ul>
+<p>For API consumers and applications running on Jackrabbit Oak this means that combinations of multiple moves can not always be properly resolved. Consequently permissions will be evaluated as if the modifications did not include move (in general being more restrictive): If the move leads to changes that are detected by the diff mechanism, regular permissions will be evaluated for all items that appear to be added, removed or modified, while a regular move operations just requires <tt>REMOVE_NODE</tt> permission on the source, <tt>ADD_NODE</tt> and <tt>NODE_TYPE_MANAGEMENT</tt> permissions at the destination.</p></div>
<div class="section">
<h5>Copy<a name="Copy"></a></h5>
<p><i>TODO: permission evaluation with copy is not yet implemented <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-920">OAK-920</a></i></p></div>