You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Oliver Lietz (JIRA)" <ji...@apache.org> on 2016/10/25 09:01:58 UTC

[jira] [Comment Edited] (SLING-5135) Whitelist legit usages of loginAdministrative and administrative ResourceResolver

    [ https://issues.apache.org/jira/browse/SLING-5135?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15604510#comment-15604510 ] 

Oliver Lietz edited comment on SLING-5135 at 10/25/16 9:01 AM:
---------------------------------------------------------------

[~bdelacretaz]: can we align the property names making them consistent? Maybe just
{{whitelist.bypass}}
{{whitelist.bundles.regex}}
{{whitelist.bundles.default}}
{{whitelist.bundles.additional}}
as all lists use BSNs anyway.

edit: {{bundles}} added to distinguish from {{bypass}}


was (Author: olli):
[~bdelacretaz]: can we align the property names making them consistent? Maybe just
{{whitelist.regex}}
{{whitelist.default}}
{{whitelist.additional}}
as all lists use BSNs anyway.

> Whitelist legit usages of loginAdministrative and administrative ResourceResolver
> ---------------------------------------------------------------------------------
>
>                 Key: SLING-5135
>                 URL: https://issues.apache.org/jira/browse/SLING-5135
>             Project: Sling
>          Issue Type: Bug
>          Components: JCR
>            Reporter: Antonio Sanso
>            Assignee: Bertrand Delacretaz
>         Attachments: SLING-5135.patch, SLING-5135.patch
>
>
> {{AbstractSlingRepositoryManager}} contains a method that disable loginAdministrative support
> {code}
>     /**
>      * Returns whether to disable the
>      * {@code SlingRepository.loginAdministrative} method or not.
>      *
>      * @return {@code true} if {@code SlingRepository.loginAdministrative} is
>      *         disabled.
>      */
>     public final boolean isDisableLoginAdministrative() 
> {code}
> This is a global configuration. It would be nice to have an extension of such mechanism that contains a white list of (few) legit usage of {{loginAdministrative}}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)