You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Eric Norman (JIRA)" <ji...@apache.org> on 2011/07/01 20:00:29 UTC
[jira] [Resolved] (SLING-2113) Non admin members of the group
GroupAdmin can not add members to the group UserAdmin
[ https://issues.apache.org/jira/browse/SLING-2113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Eric Norman resolved SLING-2113.
--------------------------------
Resolution: Won't Fix
This would be best addressed in the jackrabbit code.
> Non admin members of the group GroupAdmin can not add members to the group UserAdmin
> ------------------------------------------------------------------------------------
>
> Key: SLING-2113
> URL: https://issues.apache.org/jira/browse/SLING-2113
> Project: Sling
> Issue Type: Bug
> Components: JCR
> Affects Versions: JCR Jackrabbit User Manager 2.1.0
> Reporter: Markus Joschko
> Priority: Minor
>
> A member of the GroupAdmin group should be able to add members to all groups. That works fine except for the UserAdmin group.
> There the addition fails if the user is not at the same time the admin user.
> Jackrabbit is denying the rights for the property right.
> 27.06.2011 14:45:48.874 *ERROR* [127.0.0.1 [1309178743836] POST /system/userManager/group/UserAdmin.update.json HTTP/1.1] org.apache.sling.jackrabbit.usermanager.impl.post.UpdateGroupServlet Failed to update group. javax.jcr.AccessDeniedException: Permission denied.
> at org.apache.jackrabbit.core.ProtectedItemModifier.checkPermission(ProtectedItemModifier.java:175)
> at org.apache.jackrabbit.core.ProtectedItemModifier.setProperty(ProtectedItemModifier.java:126)
> at org.apache.jackrabbit.core.security.user.UserManagerImpl.setProtectedProperty(UserManagerImpl.java:696)
> at org.apache.jackrabbit.core.security.user.GroupImpl$PropertyBasedMembershipProvider.addMember(GroupImpl.java:392)
> at org.apache.jackrabbit.core.security.user.GroupImpl.addMember(GroupImpl.java:172)
> at org.apache.sling.jackrabbit.usermanager.impl.post.AbstractGroupPostServlet.updateGroupMembership(AbstractGroupPostServlet.java:88)
> at org.apache.sling.jackrabbit.usermanager.impl.post.UpdateGroupServlet.updateGroup(UpdateGroupServlet.java:149)
> at org.apache.sling.jackrabbit.usermanager.impl.post.UpdateGroupServlet.handleOperation(UpdateGroupServlet.java:107)
> at org.apache.sling.jackrabbit.usermanager.impl.post.AbstractPostServlet.doPost(AbstractPostServlet.java:88)
> at org.apache.sling.api.servlets.SlingAllMethodsServlet.mayService(SlingAllMethodsServlet.java:148)
> at org.apache.sling.api.servlets.SlingSafeMethodsServlet.service(SlingSafeMethodsServlet.java:344)
> at org.apache.sling.api.servlets.SlingSafeMethodsServlet.service(SlingSafeMethodsServlet.java:375)
> at org.apache.sling.engine.impl.request.RequestData.service(RequestData.java:491)
> at org.apache.sling.engine.impl.SlingRequestProcessorImpl.processComponent(SlingRequestProcessorImpl.java:273)
> at org.apache.sling.engine.impl.filter.RequestSlingFilterChain.render(RequestSlingFilterChain.java:49)
> at org.apache.sling.engine.impl.filter.AbstractSlingFilterChain.doFilter(AbstractSlingFilterChain.java:64)
> at org.apache.sling.engine.impl.debug.RequestProgressTrackerLogFilter.doFilter(RequestProgressTrackerLogFilter.java:59)
> at org.apache.sling.engine.impl.filter.AbstractSlingFilterChain.doFilter(AbstractSlingFilterChain.java:60)
> at org.apache.sling.engine.impl.SlingRequestProcessorImpl.processRequest(SlingRequestProcessorImpl.java:163)
> at org.apache.sling.engine.impl.SlingMainServlet.service(SlingMainServlet.java:187)
> at org.apache.felix.http.base.internal.handler.ServletHandler.doHandle(ServletHandler.java:96)
> at org.apache.felix.http.base.internal.handler.ServletHandler.handle(ServletHandler.java:79)
> at org.apache.felix.http.base.internal.dispatch.ServletPipeline.handle(ServletPipeline.java:42)
> at org.apache.felix.http.base.internal.dispatch.InvocationFilterChain.doFilter(InvocationFilterChain.java:49)
> at org.apache.felix.http.base.internal.dispatch.HttpFilterChain.doFilter(HttpFilterChain.java:33)
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira