You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@jackrabbit.apache.org by "Tobias Bocanegra (Jira)" <ji...@apache.org> on 2020/04/01 02:02:00 UTC

[jira] [Commented] (JCRVLT-427) Allow installation of packages with hook for users without admin privileges

    [ https://issues.apache.org/jira/browse/JCRVLT-427?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17072305#comment-17072305 ] 

Tobias Bocanegra commented on JCRVLT-427:
-----------------------------------------

+1, however I think that it should not be possible to remove the default settings, i.e. `system`, `admin` and `administrstors` should always be allowed to install a package.

> Allow installation of packages with hook for users without admin privileges
> ---------------------------------------------------------------------------
>
>                 Key: JCRVLT-427
>                 URL: https://issues.apache.org/jira/browse/JCRVLT-427
>             Project: Jackrabbit FileVault
>          Issue Type: Improvement
>          Components: vlt
>            Reporter: Konrad Windszus
>            Assignee: Konrad Windszus
>            Priority: Major
>             Fix For: 3.4.6
>
>
> Currently due to the check in https://github.com/apache/jackrabbit-filevault/blob/e257001ec22ea06bcc987cbf79f0cc9b15c4e186/vault-core/src/main/java/org/apache/jackrabbit/vault/packaging/impl/ZipVaultPackage.java#L184 packages containing a hook can only be installed by admins.
> Although I do understand the intent of that I think this is not flexible enough as currently that only gives the rights to users "admin", "system" or members of group "administrators". Instead there should be an OSGi configuration which allows to configure to grant the right to install packages with hooks to other groups as well!



--
This message was sent by Atlassian Jira
(v8.3.4#803005)