You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "angela (JIRA)" <ji...@apache.org> on 2019/01/18 08:14:00 UTC

[jira] [Commented] (OAK-7993) CompositeAuthorizationConfiguration.getRestrictionProvider() should filter duplications

    [ https://issues.apache.org/jira/browse/OAK-7993?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16745876#comment-16745876 ] 

angela commented on OAK-7993:
-----------------------------

[~stillalex], proposed patch with tests illustrating the issue and the fix attached. wdyt?

> CompositeAuthorizationConfiguration.getRestrictionProvider() should filter duplications
> ---------------------------------------------------------------------------------------
>
>                 Key: OAK-7993
>                 URL: https://issues.apache.org/jira/browse/OAK-7993
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: core, security
>            Reporter: angela
>            Assignee: angela
>            Priority: Minor
>         Attachments: OAK-7993.patch
>
>
> The current implementation of {{CompositeAuthorizationConfiguration.getRestrictionProvider()}} creates a list populated with all non-empty providers returned by the aggregated authorization modules. This may lead to duplication of providers in case multiple modules reference the same provider.
> cc: [~stillalex] 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)