You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Angela Schreiber (Jira)" <ji...@apache.org> on 2021/07/15 08:26:00 UTC

[jira] [Created] (OAK-9493) Use index option to for security relevant queries

Angela Schreiber created OAK-9493:
-------------------------------------

             Summary: Use index option to for security relevant queries
                 Key: OAK-9493
                 URL: https://issues.apache.org/jira/browse/OAK-9493
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: core, security
            Reporter: Angela Schreiber
            Assignee: Angela Schreiber


while investigating a potential issue with principal-lookup [~thomasm] made me aware of the index-option (see https://jackrabbit.apache.org/oak/docs/query/query-engine.html#Query_Option_Index_Tag) that allows to enforce the usage of a dedicated index when executing a query.

i would like to review all security relevant queries and add the index option for those that are known to be relevant for consistency and/or security.

cc: [~kpauls], fyi as this relates to the recent discussion regarding system-user-validation upon service-user-mapping in Sling.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)