You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "angela (JIRA)" <ji...@apache.org> on 2013/11/11 17:16:19 UTC

[jira] [Updated] (OAK-842) Incorrect interaction of orderable child nodes with permission evaluation

     [ https://issues.apache.org/jira/browse/OAK-842?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

angela updated OAK-842:
-----------------------

    Summary: Incorrect interaction of orderable child nodes with permission evaluation  (was: Incorrect interaction of orderable child nodes with access control )

> Incorrect interaction of orderable child nodes with permission evaluation
> -------------------------------------------------------------------------
>
>                 Key: OAK-842
>                 URL: https://issues.apache.org/jira/browse/OAK-842
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: core, security
>            Reporter: Michael Dürig
>             Fix For: 0.15
>
>
> Working on OAK-813 revealed problems with the interaction of the current implementation of orderable nodes and access control:
> * {{TreeImpl#getOrderedChildNames}} returns all child names regardless whether they are accessible in the current session or not. This might cause errors further down the line like exposure of the existence of child nodes.
> * {{TreeImpl.remove}} doesn't (can't) update the child order property if the parent is not accessible. 



--
This message was sent by Atlassian JIRA
(v6.1#6144)