You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by mr...@apache.org on 2022/07/22 12:09:17 UTC
svn commit: r1902944 [8/10] - in /jackrabbit/site/live/oak/docs: ./ architecture/ coldstandby/ css/ features/ fonts/ js/ nodestore/ nodestore/document/ nodestore/segment/ oak-mongo-js/ oak_api/ plugins/ query/ security/ security/accesscontrol/ security...
Modified: jackrabbit/site/live/oak/docs/query/query-engine.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query-engine.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query-engine.html (original)
+++ jackrabbit/site/live/oak/docs/query/query-engine.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-engine.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-engine.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – The Query Engine</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">The Query Engine <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query-engine.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
@@ -309,50 +304,59 @@ grep "^#.*$" src/site/markdown/query/que
<h2><a name="The_Query_Engine"></a>The Query Engine</h2>
<ul>
-<li><a href="#Overview">Overview</a>
+<li><a href="#the-query-engine">The Query Engine</a></li>
+<li><a href="#overview">Overview</a>
<ul>
-<li><a href="#Query_Processing">Query Processing</a>
+<li><a href="#query-processing">Query Processing</a>
<ul>
-<li><a href="#Cost_Calculation">Cost Calculation</a></li>
+<li><a href="#cost-calculation">Cost Calculation</a></li>
+<li><a href="#identifying-nodes">Identifying Nodes</a></li>
+<li><a href="#ordering">Ordering</a></li>
+<li><a href="#iterating-the-result-set">Iterating the Result Set</a></li>
</ul>
</li>
-<li><a href="#Query_Options">Query Options</a>
+<li><a href="#query-options">Query Options</a>
<ul>
-<li><a href="#Query_Option_Traversal">Query Option Traversal</a></li>
-<li><a href="#Query_Option_Index_Tag">Query Option Index Tag</a></li>
-<li><a href="#Query_Option_Offset__Limit">Query Option Offset / Limit</a></li>
-<li><a href="#Index_Selection_Policy">Index Selection Policy</a></li>
+<li><a href="#query-option-traversal">Query Option Traversal</a></li>
+<li><a href="#query-option-offset--limit">Query Option Offset / Limit</a></li>
+<li><a href="#query-option-index-tag">Query Option Index Tag</a></li>
+<li><a href="#index-selection-policy">Index Selection Policy</a></li>
</ul>
</li>
-<li><a href="#Compatibility">Compatibility</a>
+<li><a href="#compatibility">Compatibility</a>
<ul>
-<li><a href="#Result_Size">Result Size</a></li>
-<li><a href="#Quoting">Quoting</a></li>
-<li><a href="#Equality_for_Path_Constraints">Equality for Path Constraints</a></li>
+<li><a href="#result-size">Result Size</a></li>
+<li><a href="#quoting">Quoting</a></li>
+<li><a href="#equality-for-path-constraints">Equality for Path Constraints</a></li>
</ul>
</li>
-<li><a href="#Slow_Queries_and_Read_Limits">Slow Queries and Read Limits</a></li>
-<li><a href="#Keyset_Pagination">Keyset Pagination</a></li>
-<li><a href="#Full-Text_Queries">Full-Text Queries</a></li>
-<li><a href="#Excerpts_and_Highlighting">Excerpts and Highlighting</a></li>
-<li><a href="#Native_Queries">Native Queries</a></li>
-<li><a href="#Similarity_Queries">Similarity Queries</a></li>
-<li><a href="#Spellchecking">Spellchecking</a></li>
-<li><a href="#Suggestions">Suggestions</a></li>
-<li><a href="#Facets">Facets</a></li>
-<li><a href="#XPath_to_SQL-2_Transformation">XPath to SQL-2 Transformation</a></li>
-<li><a href="#The_Node_Type_Index">The Node Type Index</a></li>
-<li><a href="#Temporarily_Disabling_an_Index">Temporarily Disabling an Index</a></li>
-<li><a href="#Deprecating_Indexes">Deprecating Indexes</a></li>
-<li><a href="#The_Deprecated_Ordered_Index">The Deprecated Ordered Index</a></li>
-<li><a href="#Index_Storage_and_Manual_Inspection">Index Storage and Manual Inspection</a></li>
-<li><a href="#SQL-2_Optimisation">SQL-2 Optimisation</a></li>
-<li><a href="#Additional_XPath_and_SQL-2_Features">Additional XPath and SQL-2 Features</a></li>
-<li><a href="#Temporarily_Blocking_Queries">Temporarily Blocking Queries</a></li>
+<li><a href="#slow-queries-and-read-limits">Slow Queries and Read Limits</a></li>
+<li><a href="#keyset-pagination">Keyset Pagination</a></li>
+<li><a href="#full-text-queries">Full-Text Queries</a></li>
+<li><a href="#excerpts-and-highlighting">Excerpts and Highlighting</a>
+<ul>
+
+<li><a href="#simpleexcerptprovider">SimpleExcerptProvider</a></li>
+</ul>
+</li>
+<li><a href="#native-queries">Native Queries</a></li>
+<li><a href="#similarity-queries">Similarity Queries</a></li>
+<li><a href="#spellchecking">Spellchecking</a></li>
+<li><a href="#suggestions">Suggestions</a></li>
+<li><a href="#facets">Facets</a></li>
+<li><a href="#xpath-to-sql-2-transformation">XPath to SQL-2 Transformation</a></li>
+<li><a href="#the-node-type-index">The Node Type Index</a></li>
+<li><a href="#temporarily-disabling-an-index">Temporarily Disabling an Index</a></li>
+<li><a href="#deprecating-indexes">Deprecating Indexes</a></li>
+<li><a href="#the-deprecated-ordered-index">The Deprecated Ordered Index</a></li>
+<li><a href="#index-storage-and-manual-inspection">Index Storage and Manual Inspection</a></li>
+<li><a href="#sql-2-optimisation">SQL-2 Optimisation</a></li>
+<li><a href="#additional-xpath-and-sql-2-features">Additional XPath and SQL-2 Features</a></li>
+<li><a href="#temporarily-blocking-queries">Temporarily Blocking Queries</a></li>
</ul>
</li>
</ul></section><section>
@@ -411,7 +415,17 @@ and if there could in theory be one netw
<p>The returned value is supposed to be an estimate and doesn't have to be very accurate.
Please note this method is called on each index whenever a query is run,
so the method should be reasonably fast (not read any data itself, or at least not read too much data).</p>
-<p>If an index implementation can not query the data, it has to return <code>Infinity</code> (<code>Double.POSITIVE_INFINITY</code>).</p></section></section><section>
+<p>If an index implementation can not query the data, it has to return <code>Infinity</code> (<code>Double.POSITIVE_INFINITY</code>).</p></section><section>
+<h4><a name="Identifying_Nodes"></a>Identifying Nodes</h4>
+<p>If an index is selected, the query is executed against the index. The translation from the JCR Query syntax into the query language supported by the index includes as many constraints as possible which are supported by the index. Depending on the index definition this can mean that not all constraints can be resolved by the index itself.
+In this case, the Query Engine tries to let the index handle as much constraints as possible and later executes all remaining constraints while <a href="#iterating-the-result-set">Iterating the Result Set</a> by retrieving the nodes from the node store and evaluating the nodes against the constraints. Each retrieval, including non-matching nodes is counted as a traversal. This means that despite the use of an index an additional traversal can be required if not all constraints in a query are executed against the index.</p>
+<p>If no matching index is determined in the previous step, the Query Engine executes this query solely based on a traversing the Node Store and evaluating the nodes against the constraints.</p></section><section>
+<h4><a name="Ordering"></a>Ordering</h4>
+<p>If a query requests an ordered result set, the Query Engine tries to get an already ordered result from the index; in case the index definition does not support the requested ordering or in case of a traversal, the Query Engine must execute the ordering itself. To achieve this the entire result set is read into memory and then sorted. This consumes memory, takes time and requires the Query Engine to read the full result set even in the case where a limit setting would otherwise limit the number of results traversed.</p></section><section>
+<h4><a name="Iterating_the_Result_Set"></a>Iterating the Result Set</h4>
+<p>Query results are implemented as lazy iterators, and the result set is only read if needed. When the next result is requested, the result iterator seeks the potential nodes to find the next node matching the query.
+During this seek process the Query Engine reads and filters the potential nodes until it finds a match. Even if the query is handled completely by an index, the Query Engine needs to check if the requesting session is allowed to read the nodes.</p>
+<p>That means that during this final step every potential node must be loaded from the node store, thus counting towards the read limit (see <a href="#slow-queries-and-read-limits">Slow Queries and Read Limits</a>).</p></section></section><section>
<h3><a name="Query_Options"></a>Query Options</h3>
<p>With query options, you can enforce the usage of indexes (failing the query if there is no index),
limit which indexes should be considered and set the limit and offset for a query.</p><section>
Modified: jackrabbit/site/live/oak/docs/query/query-troubleshooting.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query-troubleshooting.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query-troubleshooting.html (original)
+++ jackrabbit/site/live/oak/docs/query/query-troubleshooting.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-troubleshooting.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-troubleshooting.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Query Troubleshooting</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Query Troubleshooting <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query-troubleshooting.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
@@ -387,8 +382,8 @@ where isdescendantnode('/etc/commerce')
and lower([jcr:title]) like '%coat%'
and [commerceType] = 'product'
option(traversal ok)
-</code></pre></div>
-<p>#### Estimating Node Counts</p>
+</code></pre></div></section><section>
+<h4><a name="Estimating_Node_Counts"></a>Estimating Node Counts</h4>
<p>To find out how many nodes are in a certain path, you can use the JMX bean <code>NodeCounter</code>,
which can estimate the node count. Example: run
<code>getEstimatedChildNodeCounts</code> with <code>p1=/</code> and <code>p2=2</code> might give you:</p>
@@ -401,8 +396,8 @@ which can estimate the node count. Examp
...
</code></pre></div>
<p>So in this case, there are still many nodes below <code>/etc/commerce</code> in the production repository.
-Also note that the number of nodes can grow over time.</p>
-<p>#### Prevent Running Traversal Queries</p>
+Also note that the number of nodes can grow over time.</p></section><section>
+<h4><a name="Prevent_Running_Traversal_Queries"></a>Prevent Running Traversal Queries</h4>
<p>To avoid running queries that don't use an index altogether,
you can change the configuration in the JMX bean <code>QueryEngineSettings</code>:
if you set <code>FailTraversal</code> to <code>true</code>, then queries without index will throw an exception
Modified: jackrabbit/site/live/oak/docs/query/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query.html (original)
+++ jackrabbit/site/live/oak/docs/query/query.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Oak Query</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Oak Query <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/query/search-mt.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/search-mt.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/search-mt.html (original)
+++ jackrabbit/site/live/oak/docs/query/search-mt.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/search-mt.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/search-mt.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Machine Translation for Search</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Machine Translation for Search <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/search-mt.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/query/solr.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/solr.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/solr.html (original)
+++ jackrabbit/site/live/oak/docs/query/solr.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/solr.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/solr.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Solr Index</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Solr Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/solr.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/release-schedule.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/release-schedule.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/release-schedule.html (original)
+++ jackrabbit/site/live/oak/docs/release-schedule.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/release-schedule.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/release-schedule.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Releases</title>
- <link rel="stylesheet" href="./css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="./css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="./css/site.css" />
<link rel="stylesheet" href="./css/print.css" media="print" />
- <script src="./js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="./js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Releases <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/release-schedule.md"><img src="./images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/roadmap.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/roadmap.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/roadmap.html (original)
+++ jackrabbit/site/live/oak/docs/roadmap.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/roadmap.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/roadmap.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Roadmap</title>
- <link rel="stylesheet" href="./css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="./css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="./css/site.css" />
<link rel="stylesheet" href="./css/print.css" media="print" />
- <script src="./js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="./js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Roadmap <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/roadmap.md"><img src="./images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Access Control Management</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -290,9 +286,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/default.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/default.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/default.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/default.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Access Control Management : The Default Implementation</title>
- <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../css/site.css" />
<link rel="stylesheet" href="../../css/print.css" media="print" />
- <script src="../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management : The Default Implementation <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/default.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -290,9 +286,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
@@ -426,8 +421,8 @@ in Oak 1.0 as well as a list of built-in
found in section <a href="../authorization/restriction.html">Restriction Management</a>.</p>
<p><a name="representation"></a></p></section></section><section>
<h3><a name="Representation_in_the_Repository"></a>Representation in the Repository</h3>
-<p>All access control policies defined with an Oak repository are stores child of
-the node they are bound to. The node type definition used to represent access control content:</p>
+<p>Access control policies created and modified using the default authorization model are stored as child of
+the node they are bound to with name <code>rep:policy</code> or as node with path <code>/rep:repoPolicy</code> (for repo-level policies). The node type definition used to represent access control content:</p>
<div class="source"><pre class="prettyprint"><code>[rep:AccessControllable]
mixin
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/differences.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/differences.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Access Control Management : Differences wrt Jackrabbit 2.x</title>
- <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../css/site.css" />
<link rel="stylesheet" href="../../css/print.css" media="print" />
- <script src="../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management : Differences wrt Jackrabbit 2.x <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/differences.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -290,9 +286,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/editing.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/editing.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Using the Access Control Management API</title>
- <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../css/site.css" />
<link rel="stylesheet" href="../../css/print.css" media="print" />
- <script src="../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Using the Access Control Management API <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/editing.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -290,9 +286,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/authentication.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Authentication</title>
- <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../css/site.css" />
<link rel="stylesheet" href="../css/print.css" media="print" />
- <script src="../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -283,9 +279,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/authentication/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/default.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/default.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/default.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/default.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Authentication : Implementation Details</title>
- <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../css/site.css" />
<link rel="stylesheet" href="../../css/print.css" media="print" />
- <script src="../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication : Implementation Details <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/default.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -283,9 +279,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/authentication/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/differences.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/differences.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/differences.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/differences.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Authentication : Differences wrt Jackrabbit 2.x</title>
- <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../css/site.css" />
<link rel="stylesheet" href="../../css/print.css" media="print" />
- <script src="../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication : Differences wrt Jackrabbit 2.x <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/differences.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -283,9 +279,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/defaultusersync.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/defaultusersync.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – User and Group Synchronization : The Default Implementation</title>
- <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../../css/site.css" />
<link rel="stylesheet" href="../../../css/print.css" media="print" />
- <script src="../../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">User and Group Synchronization : The Default Implementation <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/defaultusersync.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
@@ -357,7 +352,7 @@ represented by <a href="/oak/docs/apidoc
<p><a name="dynamic_membership"></a></p></section></section><section>
<h3><a name="Dynamic_Group_Membership"></a>Dynamic Group Membership</h3>
<p>As of Oak 1.5.3 the default sync handler comes with an addition configuration
-option that allows to enable dynamic group membership resolution for external users.
+option that allows enabling dynamic group membership resolution for external users.
Enabling dynamic membership in the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/basic/DefaultSyncConfig.html">DefaultSyncConfig</a> will change the way external
groups are synchronized (see also <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-4101">OAK-4101</a>).</p>
<p>The details and effects on other security related modules are described in
@@ -382,7 +377,7 @@ internal system session.</p>
<p>This prevents users to unintentionally or maliciously manipulating the information
linking to the external identity provider in particular their external identity
and the set of external group principals associated with their account.</p>
-<p>Additionally the validator asserts the consistency of the properties defined
+<p>Additionally, the validator asserts the consistency of the properties defined
with external user/group accounts.</p>
<table border="0" class="table table-striped">
<thead>
@@ -424,6 +419,50 @@ validator performs the following checks:
<td align="left">0075</td>
<td>Property ‘rep:externalId’ may only have a single value of type STRING.</td></tr>
</tbody>
+</table></section><section>
+<h5><a name="Protecting_synchronized_external_users.2Fgroups"></a>Protecting synchronized external users/groups</h5>
+<p>If protection of synchronized external users/groups is enabled (since Oak 1.44.0) an additional validator is present
+which either warns upon or prevents creation, modification and removal of external identities that have been synchronized
+into the repository with the following exception:</p>
+<ul>
+
+<li>System sessions and configured service user principals (see <code>systemPrincipalNames</code> option) are exempted from the protection</li>
+<li>Other security related content present with a given synced user/group can still be written given the editing session
+has the required permissions (e.g. adding access control content or removing token nodes).</li>
+</ul>
+<p>The protection aims to prevent inconsistencies between the IDP (source of truth), and the synchronized user/group
+accounts in particular group membership and properties.</p>
+<p>The following constraint violations will be reported:</p>
+<table border="0" class="table table-striped">
+<thead>
+
+<tr class="a">
+<th>Code</th>
+<th>Message</th></tr>
+</thead><tbody>
+
+<tr class="b">
+<td align="left">0076</td>
+<td>Attempt to add property ‘%s’ to protected external identity node ‘%s’</td></tr>
+<tr class="a">
+<td align="left">0076</td>
+<td>Attempt to modify property ‘%s’ at protected external identity node ‘%s’</td></tr>
+<tr class="b">
+<td align="left">0076</td>
+<td>Attempt to delete property ‘%s’ from protected external identity node ‘%s’</td></tr>
+<tr class="a">
+<td align="left">0076</td>
+<td>Attempt to add protected external identity ‘%s’</td></tr>
+<tr class="b">
+<td align="left">0076</td>
+<td>Attempt to add node ‘%s’ to protected external identity node ‘%s’</td></tr>
+<tr class="a">
+<td align="left">0076</td>
+<td>Attempt to remove protected external identity ‘%s’</td></tr>
+<tr class="b">
+<td align="left">0076</td>
+<td>Attempt to remove node ‘%s’ from protected external identity</td></tr>
+</tbody>
</table>
<p><a name="configuration"></a></p></section></section></section><section>
<h3><a name="Configuration"></a>Configuration</h3><section>
@@ -463,34 +502,38 @@ validator performs the following checks:
<td><code>user.dynamicMembership</code></td>
<td>Enabling dynamic membership for external users.</td></tr>
<tr class="b">
+<td align="left">User Enforce Dynamic Membership</td>
+<td><code>user.enforceDynamicMembership</code></td>
+<td>If enabled together with <code>user.dynamicMembership</code> previously synced membership information will be migrated to dynamic membership upon user sync. Otherwise it takes no effect.</td></tr>
+<tr class="a">
<td align="left">User Path Prefix</td>
<td><code>user.pathPrefix</code></td>
<td>The path prefix used when creating new users.</td></tr>
-<tr class="a">
+<tr class="b">
<td align="left">User property mapping</td>
<td><code>user.propertyMapping</code></td>
<td>List mapping definition of local properties from external ones. eg: ‘profile/email=mail’.Use double quotes for fixed values. eg: 'profile/nt:primaryType=“nt:unstructured”</td></tr>
-<tr class="b">
+<tr class="a">
<td align="left">Disable missing users</td>
<td><code>user.disableMissing</code></td>
<td>By default, users that no longer exist on the external provider will be locally removed. Set this property to <code>true</code> to <a class="externalLink" href="https://jackrabbit.apache.org/api/2.8/org/apache/jackrabbit/api/security/user/User.html#disable(java.lang.String)">disable</a> them instead and have them re-enabled if they become available again.</td></tr>
-<tr class="a">
+<tr class="b">
<td align="left">Group auto membership</td>
<td><code>group.autoMembership</code></td>
<td>List of groups that a synced group is added to automatically</td></tr>
-<tr class="b">
+<tr class="a">
<td align="left">Group Expiration Time</td>
<td><code>group.expirationTime</code></td>
<td>Duration until a synced group expires (eg. ‘1h 30m’ or ‘1d’).</td></tr>
-<tr class="a">
+<tr class="b">
<td align="left">Group Path Prefix</td>
<td><code>group.pathPrefix</code></td>
<td>The path prefix used when creating new groups.</td></tr>
-<tr class="b">
+<tr class="a">
<td align="left">Group property mapping</td>
<td><code>group.propertyMapping</code></td>
<td>List mapping definition of local properties from external ones.</td></tr>
-<tr class="a">
+<tr class="b">
<td align="left"> </td>
<td> </td>
<td> </td></tr>
@@ -521,18 +564,26 @@ as additional value to the <code>require
<tr class="a">
<th>Name</th>
<th>Property</th>
-<th>Description</th></tr>
+<th>Description</th>
+<th>Values</th></tr>
</thead><tbody>
<tr class="b">
<td align="left">External Identity Protection</td>
<td><code>protectExternalId</code></td>
-<td>Enables protection of the system maintained <code>rep:externalId</code> properties</td></tr>
+<td>Enables protection of the system maintained <code>rep:externalId</code> properties</td>
+<td><code>true</code>,<code>false</code></td></tr>
<tr class="a">
+<td align="left">External User and Group Protection</td>
+<td><code>protectExternalIdentities</code></td>
+<td>Enables protection of synchronized external users/groups accounts (since Oak 1.44.0).</td>
+<td><code>None</code>: no protection (default),<br /><code>Warn</code>: log warnings,<br /><code>Protected</code>: protection enabled</td></tr>
+<tr class="b">
<td align="left">System Principal Names</td>
<td><code>systemPrincipalNames</code></td>
-<td>Names of additional ‘SystemUserPrincipal’ instances that are excluded from the protection check (since Oak 1.44.0)</td></tr>
-<tr class="b">
+<td>Names of additional ‘SystemUserPrincipal’ instances that are excluded from the protection check (since Oak 1.44.0)</td>
+<td><code>true</code>,<code>false</code></td></tr>
+<tr class="a">
<td align="left"> </td>
<td> </td>
<td> </td></tr>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/dynamic.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/dynamic.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – User and Group Synchronization : Dynamic Membership</title>
- <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../../css/site.css" />
<link rel="stylesheet" href="../../../css/print.css" media="print" />
- <script src="../../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">User and Group Synchronization : Dynamic Membership <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/dynamic.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>
@@ -329,7 +324,7 @@ will additionally set the property <code
‘STRING’ storing the names of the <code>java.security.acl.Group</code>-principals a given
external user is member of (both declared and inherited according to the configured
membership nesting depth)</li>
-<li>External groups will no longer be synchronised into the repository's user management
+<li>External groups will no longer be synchronized into the repository's user management
but will only be available as <code>Principal</code>s (see section <i>User Management</i> below).</li>
</ul>
<p>Note: as a further improvement the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/PrincipalNameResolver.html">PrincipalNameResolver</a> interface was introduced
@@ -372,7 +367,7 @@ The same applies for the conditional aut
implementation (i.e. [ExternalPrincipalConfiguration]) that is in charge of securing<br />
the <code>rep:externalPrincipalNames</code> properties (see also section <a href="defaultusersync.html#validation">Validation</a>
and <a href="defaultusersync.html#configuration">Configuration</a>).</p>
-<p>Additionally the [ExternalPrincipalConfiguration] provides a <code>PrincipalProvider</code>
+<p>Additionally, the [ExternalPrincipalConfiguration] provides a <code>PrincipalProvider</code>
implementation which makes external (group) principals available to the repository's
authentication and authorization using the <code>rep:externalPrincipalNames</code> as a
persistent cache to avoid expensive lookup on the IDP.
@@ -389,10 +384,14 @@ synchronization of the complete external
user management feature but limit the synchronized information to the principal
names and the membership relation between a given <code>java.security.acl.Group</code> principal
and external user accounts.</p>
-<p>The user management API will consequently no longer be knowledgeable of <b>external
-group identities</b> (exception: groups that have been synchronized before enabling
-the feature will remain untouched and will be synchronized according to the
-sync configuration).</p>
+<p>The user management API will consequently no longer be knowledgeable of <b>external group identities</b>.</p>
+<p>For groups that have been synchronized before dynamic membership got enabled, the following rules will
+apply:</p>
+<ul>
+
+<li>if option <code>user.enforceDynamicMembership</code> is disabled (default), previously synced groups and their member information will continue to be synchronized according to the sync configuration.</li>
+<li>if option <code>user.enforceDynamicMembership</code> is enabled, previously synced membership will be migrated to become dynamic upon user synchronization. The synchronized group will be removed once it not longer has any declared members.</li>
+</ul>
<p>While this behavior does not affect default authentication and authorization modules
(see below) it will have an impact on applications that rely on full synchronization
of external identities. Those application won't be able to benefit from the dynamic
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html?rev=1902944&r1=1902943&r2=1902944&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html Fri Jul 22 12:09:16 2022
@@ -2,8 +2,8 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/externallogin_examples.md at 2022-06-13
- | Rendered using Apache Maven Fluido Skin 1.11.0
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/externallogin_examples.md at 2022-07-22
+ | Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
@@ -11,10 +11,10 @@
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="generator" content="Apache Maven Doxia Site Renderer 1.11.1" />
<title>Jackrabbit Oak – Authentication with External Login Module : Examples</title>
- <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.0.min.css" />
+ <link rel="stylesheet" href="../../../css/apache-maven-fluido-1.11.1.min.css" />
<link rel="stylesheet" href="../../../css/site.css" />
<link rel="stylesheet" href="../../../css/print.css" media="print" />
- <script src="../../../js/apache-maven-fluido-1.11.0.min.js"></script>
+ <script src="../../../js/apache-maven-fluido-1.11.1.min.js"></script>
<!-- Matomo -->
<script>
@@ -34,11 +34,7 @@
<!-- End Matomo Code -->
</head>
<body class="topBarEnabled">
- <a href="https://github.com/apache/jackrabbit-oak">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
+ <a class="github-fork-ribbon right-top" href="https://github.com/apache/jackrabbit-oak" data-ribbon="Fork me on GitHub" title="Fork me on GitHub">Fork me on GitHub</a>
<header id="topbar" class="navbar navbar-fixed-top ">
<div class="navbar-inner">
<div class="container-fluid">
@@ -178,8 +174,8 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication with External Login Module : Examples <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/externallogin_examples.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-06-13</li>
- <li id="projectVersion" class="pull-right">Version: 1.43-SNAPSHOT</li>
+ <li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2022-07-22</li>
+ <li id="projectVersion" class="pull-right">Version: 1.45-SNAPSHOT</li>
</ul>
</div>
</header>
@@ -273,9 +269,8 @@
<div class="well sidebar-nav">
<form id="search-form" action="https://www.google.com/search" method="get" >
<input value="jackrabbit.apache.org/oak/docs/" name="sitesearch" type="hidden"/>
- <input class="search-query" name="q" id="query" type="text" />
+ <input class="search-query" name="q" id="query" type="text" placeholder="Search with Google..." />
</form>
-<script>asyncJs( 'https://cse.google.com/brand?form=search-form' )</script>
<div id="poweredBy">
<div class="clear"></div>
<div class="clear"></div>