You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by th...@apache.org on 2019/07/04 07:02:11 UTC
svn commit: r1862534 [5/8] - in /jackrabbit/site/live/oak/docs: ./
architecture/ coldstandby/ features/ nodestore/ nodestore/document/
nodestore/segment/ oak-mongo-js/ oak_api/ plugins/ query/ security/
security/accesscontrol/ security/authentication/ ...
Modified: jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Authentication with the External Login Module</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – External Identity Management</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/ldap.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/ldap.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/ldap.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/ldap.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – LDAP Integration</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Pre-Authenticated Login</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/token/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/token/default.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/token/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/token/default.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Token Management : The Default Implementation</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Token Authentication and Token Management</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/usersync.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/usersync.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/usersync.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/usersync.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-07-03
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190703" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – User and Group Synchronization</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -86,7 +86,16 @@
<li><a href="../../query/solr.html" title="Solr Index">Solr Index</a></li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security">Security</a></li>
+ <li class="dropdown-submenu">
+<a href="../../security/overview.html" title="Security">Security</a>
+ <ul class="dropdown-menu">
+ <li><a href="../../security/introduction.html" title="Introduction">Introduction</a></li>
+ <li><a href="../../security/authentication.html" title="Authentication">Authentication</a></li>
+ <li><a href="../../security/authorization.html" title="Authorization">Authorization</a></li>
+ <li><a href="../../security/principal.html" title="Principal Management">Principal Management</a></li>
+ <li><a href="../../security/user.html" title="User Management">User Management</a></li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter">Atomic Counter</a></li>
<li><a href="../../features/observation.html" title="Observation">Observation</a></li>
</ul>
@@ -142,7 +151,7 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-07-03<span class="divider">|</span>
</li>
<li id="projectVersion">Version: 1.14-SNAPSHOT</li>
</ul>
@@ -197,7 +206,34 @@
<li><a href="../../query/solr.html" title="Solr Index"><span class="none"></span>Solr Index</a> </li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security"><span class="none"></span>Security</a> </li>
+ <li><a href="../../security/overview.html" title="Security"><span class="icon-chevron-down"></span>Security</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/introduction.html" title="Introduction"><span class="none"></span>Introduction</a> </li>
+ <li><a href="../../security/authentication.html" title="Authentication"><span class="icon-chevron-down"></span>Authentication</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/authentication/differences.html" title="Differences"><span class="none"></span>Differences</a> </li>
+ <li><a href="../../security/authentication/default.html" title="Default"><span class="none"></span>Default</a> </li>
+ <li><a href="../../security/authentication/preauthentication.html" title="Pre-Authentication"><span class="none"></span>Pre-Authentication</a> </li>
+ <li><a href="javascript:void(0)" title="Extensions"><span class="icon-chevron-down"></span>Extensions</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/authentication/tokenmanagement.html" title="Token"><span class="none"></span>Token</a> </li>
+ <li><a href="../../security/authentication/externalloginmodule.html" title="External"><span class="icon-chevron-down"></span>External</a>
+ <ul class="nav nav-list">
+ <li class="active"><a href="#"><span class="none"></span>Sync</a>
+ </li>
+ <li><a href="../../security/authentication/identitymanagement.html" title="Identity Management"><span class="none"></span>Identity Management</a> </li>
+ <li><a href="../../security/authentication/ldap.html" title="LDAP"><span class="none"></span>LDAP</a> </li>
+ </ul>
+ </li>
+ </ul>
+ </li>
+ </ul>
+ </li>
+ <li><a href="../../security/authorization.html" title="Authorization"><span class="icon-chevron-right"></span>Authorization</a> </li>
+ <li><a href="../../security/principal.html" title="Principal Management"><span class="icon-chevron-right"></span>Principal Management</a> </li>
+ <li><a href="../../security/user.html" title="User Management"><span class="icon-chevron-right"></span>User Management</a> </li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter"><span class="none"></span>Atomic Counter</a> </li>
<li><a href="../../features/observation.html" title="Observation"><span class="none"></span>Observation</a> </li>
<li class="nav-header">Using Oak</li>
@@ -284,7 +320,7 @@
<div class="section">
<h3><a name="Default_Implementation"></a>Default Implementation</h3>
<p>Oak 1.0 provides a default implementation of the user synchronization API that allow to plug additional <tt>SyncHandler</tt> implementations.</p>
-<p>Default implementation is described in section <a href="external/defaultusersync.html">User and Group Synchronization : The Default Implementation</a>.</p></div>
+<p>Default implementation is described in section <a href="external/defaultusersync.html">User and Group Synchronization : The Default Implementation</a> and <a href="external/dynamic.html">User and Group Synchronization : Dynamic Membership</a>.</p></div>
<div class="section">
<h3><a name="Pluggability"></a>Pluggability</h3>
<p>There are two ways to replace/change the user synchronization behavior</p>
Modified: jackrabbit/site/live/oak/docs/security/authorization.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-01-08
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190108" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Authorization</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.6.min.css" />
@@ -51,7 +51,7 @@
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
<ul class="dropdown-menu">
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" title="JCR API">JCR API</a></li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" title="Jackrabbit API">Jackrabbit API</a></li>
<li><a href="../oak_api/overview.html" title="Oak API">Oak API</a></li>
</ul>
@@ -142,9 +142,9 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-01-08<span class="divider">|</span>
</li>
- <li id="projectVersion">Version: 1.14-SNAPSHOT</li>
+ <li id="projectVersion">Version: 1.10-SNAPSHOT</li>
</ul>
</div>
<div class="row-fluid">
@@ -160,7 +160,7 @@
<li><a href="../architecture/overview.html" title="Overview"><span class="none"></span>Overview</a> </li>
<li><a href="../architecture/nodestate.html" title="The Node State Model"><span class="none"></span>The Node State Model</a> </li>
<li class="nav-header">Main APIs</li>
- <li><a href="https://docs.adobe.com/docs/en/spec/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
+ <li><a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API"><span class="none"></span>JCR API</a> </li>
<li><a href="https://jackrabbit.apache.org/jcr/jcr-api.html" class="externalLink" title="Jackrabbit API"><span class="none"></span>Jackrabbit API</a> </li>
<li><a href="../oak_api/overview.html" title="Oak API"><span class="none"></span>Oak API</a> </li>
<li class="nav-header">Features and Plugins</li>
@@ -169,7 +169,6 @@
<li><a href="../nodestore/documentmk.html" title="Document NodeStore"><span class="icon-chevron-down"></span>Document NodeStore</a>
<ul class="nav nav-list">
<li><a href="../nodestore/document/mongo-document-store.html" title="MongoDB DocumentStore"><span class="none"></span>MongoDB DocumentStore</a> </li>
- <li><a href="../nodestore/document/rdb-document-store.html" title="RDB DocumentStore"><span class="none"></span>RDB DocumentStore</a> </li>
<li><a href="../nodestore/document/node-bundling.html" title="Node Bundling"><span class="none"></span>Node Bundling</a> </li>
<li><a href="../nodestore/document/secondary-store.html" title="Secondary Store"><span class="none"></span>Secondary Store</a> </li>
<li><a href="../nodestore/persistent-cache.html" title="Persistent Cache"><span class="none"></span>Persistent Cache</a> </li>
Modified: jackrabbit/site/live/oak/docs/security/authorization/composite.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/composite.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/composite.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/composite.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-07-03
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190703" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Combining Multiple Authorization Models</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -86,7 +86,16 @@
<li><a href="../../query/solr.html" title="Solr Index">Solr Index</a></li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security">Security</a></li>
+ <li class="dropdown-submenu">
+<a href="../../security/overview.html" title="Security">Security</a>
+ <ul class="dropdown-menu">
+ <li><a href="../../security/introduction.html" title="Introduction">Introduction</a></li>
+ <li><a href="../../security/authentication.html" title="Authentication">Authentication</a></li>
+ <li><a href="../../security/authorization.html" title="Authorization">Authorization</a></li>
+ <li><a href="../../security/principal.html" title="Principal Management">Principal Management</a></li>
+ <li><a href="../../security/user.html" title="User Management">User Management</a></li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter">Atomic Counter</a></li>
<li><a href="../../features/observation.html" title="Observation">Observation</a></li>
</ul>
@@ -142,7 +151,7 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-07-03<span class="divider">|</span>
</li>
<li id="projectVersion">Version: 1.14-SNAPSHOT</li>
</ul>
@@ -197,7 +206,30 @@
<li><a href="../../query/solr.html" title="Solr Index"><span class="none"></span>Solr Index</a> </li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security"><span class="none"></span>Security</a> </li>
+ <li><a href="../../security/overview.html" title="Security"><span class="icon-chevron-down"></span>Security</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/introduction.html" title="Introduction"><span class="none"></span>Introduction</a> </li>
+ <li><a href="../../security/authentication.html" title="Authentication"><span class="icon-chevron-right"></span>Authentication</a> </li>
+ <li><a href="../../security/authorization.html" title="Authorization"><span class="icon-chevron-down"></span>Authorization</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/accesscontrol.html" title="Access Control Management"><span class="icon-chevron-right"></span>Access Control Management</a> </li>
+ <li><a href="../../security/permission.html" title="Permission Evaluation"><span class="icon-chevron-right"></span>Permission Evaluation</a> </li>
+ <li><a href="../../security/privilege.html" title="Privilege Management"><span class="icon-chevron-right"></span>Privilege Management</a> </li>
+ <li><a href="javascript:void(0)" title="Extensions"><span class="icon-chevron-down"></span>Extensions</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/authorization/restriction.html" title="Restrictions"><span class="none"></span>Restrictions</a> </li>
+ <li class="active"><a href="#"><span class="none"></span>Multiple Models</a>
+ </li>
+ <li><a href="../../security/authorization/cug.html" title="Closed User Groups"><span class="none"></span>Closed User Groups</a> </li>
+ <li><a href="../../security/authorization/principalbased.html" title="Principal Based"><span class="none"></span>Principal Based</a> </li>
+ </ul>
+ </li>
+ </ul>
+ </li>
+ <li><a href="../../security/principal.html" title="Principal Management"><span class="icon-chevron-right"></span>Principal Management</a> </li>
+ <li><a href="../../security/user.html" title="User Management"><span class="icon-chevron-right"></span>User Management</a> </li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter"><span class="none"></span>Atomic Counter</a> </li>
<li><a href="../../features/observation.html" title="Observation"><span class="none"></span>Observation</a> </li>
<li class="nav-header">Using Oak</li>
@@ -268,6 +300,7 @@
<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/accesscontrol/PolicyOwner.html">PolicyOwner</a>: Extension to the <tt>AccessControlManager</tt>, that allows a given implementation to claim responsibility for handling certain <tt>AccessControlPolicy</tt> implementations.</li>
<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/permission/AggregatedPermissionProvider.html">AggregatedPermissionProvider</a>: Subclass of <tt>PermissionProvider</tt> which is mandated for permission evaluation once multiple providers are configured.</li>
+<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/permission/AggregationFilter.html">AggregationFilter</a>: Optional add-on to cancel the aggregation (since Oak 1.16)</li>
</ul>
<div class="section">
<h4><a name="PolicyOwner"></a>PolicyOwner</h4>
@@ -277,7 +310,14 @@
<p>Extension of the <tt>PermissionProvider</tt> interface that allows a given provider to be deployed in a composite authorization setup. The additional methods allow the aggregating provider to identify if a given <tt>PermissionProvider</tt> can handle permission evaluation for a given set of permissions at a given path.</p>
<div class="section">
<h5><a name="Example"></a>Example</h5>
-<p>The permission provider shipped with the <a href="cug.html#details">oak-authorization-cug</a> module has a very limited scope: it only evaluates read-access to regular items at the configured supported paths. This means e.g. that the implementation is not able to determine if write access is granted to a given set of <tt>Principal</tt>s and indicates this fact by just returning the subset of supported read permissions upon <tt>supportedPermissions(Tree, PropertyState, long)</tt>. The aggregated permission provider will consequently not consult this implementation for the evaluation of write permissions and move on to other providers in the aggregate.</p>
+<p>The permission provider shipped with the <a href="cug.html#details">oak-authorization-cug</a> module has a very limited scope: it only evaluates read-access to regular items at the configured supported paths. This means e.g. that the implementation is not able to determine if write access is granted to a given set of <tt>Principal</tt>s and indicates this fact by just returning the subset of supported read permissions upon <tt>supportedPermissions(Tree, PropertyState, long)</tt>. The aggregated permission provider will consequently not consult this implementation for the evaluation of write permissions and move on to other providers in the aggregate.</p></div></div>
+<div class="section">
+<h4><a name="AggregationFilter"></a>AggregationFilter</h4>
+<p>Oak 1.16 introduces an optional add-on that allows for further refine the permission evaluation (and computation of effective policies). Specifically, the interface <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/permission/AggregationFilter.html">AggregationFilter</a> provides the ability to conditionally stop the aggregation process.</p>
+<div class="section">
+<h5><a name="Example"></a>Example</h5>
+<p>The example permission provider present with the <a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/oak/trunk/oak-exercise/src/main/java/org/apache/jackrabbit/oak/exercise/security/authorization/models/simplifiedroles/ThreeRolesAuthorizationConfiguration.java">ThreeRolesAuthorizationConfiguration</a> in <i>oak-exercise</i> will for a given configured subtree apply the following roles to a given <tt>Subject</tt>: no-access, reader, editor and owner. For any path outside of the configure tree this model takes no effect. If this module were to be deployed to an Oak repository installation that already combines CUG-authorization with the default authorization, the aggregated permission evaluation mechanism would require all authorization models to grant permissions below that subtree. This essentially mandates redundant permission setup with all models. An custom <tt>AggregationFilter</tt> however would allow to cancel the aggregation once <tt>ThreeRolesPermissi
onProvider</tt> completed the evaluation for a given set of principals but would leave aggregation intact otherwise (i.e. permission evaluation outside of the configured path where <tt>ThreeRolesPermissionProvider</tt> is not invoked or for principals that don’t match the criteria).</p>
+<p>See also <a href="principalbased.html#details_aggregationfilter">Managing Access by Principal</a> for an implementation example.</p>
<p><a name="details"></a></p></div></div></div>
<div class="section">
<h3><a name="Implementation_Details"></a>Implementation Details</h3>
Modified: jackrabbit/site/live/oak/docs/security/authorization/cug.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/cug.html?rev=1862534&r1=1862533&r2=1862534&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/cug.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/cug.html Thu Jul 4 07:02:09 2019
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-06-12
+ | Generated by Apache Maven Doxia Site Renderer 1.8.1 at 2019-07-03
| Rendered using Apache Maven Fluido Skin 1.6
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20190612" />
+ <meta name="Date-Revision-yyyymmdd" content="20190703" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak – Managing Access with Closed User Groups (CUG)</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.6.min.css" />
@@ -86,7 +86,16 @@
<li><a href="../../query/solr.html" title="Solr Index">Solr Index</a></li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security">Security</a></li>
+ <li class="dropdown-submenu">
+<a href="../../security/overview.html" title="Security">Security</a>
+ <ul class="dropdown-menu">
+ <li><a href="../../security/introduction.html" title="Introduction">Introduction</a></li>
+ <li><a href="../../security/authentication.html" title="Authentication">Authentication</a></li>
+ <li><a href="../../security/authorization.html" title="Authorization">Authorization</a></li>
+ <li><a href="../../security/principal.html" title="Principal Management">Principal Management</a></li>
+ <li><a href="../../security/user.html" title="User Management">User Management</a></li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter">Atomic Counter</a></li>
<li><a href="../../features/observation.html" title="Observation">Observation</a></li>
</ul>
@@ -142,7 +151,7 @@
<div id="breadcrumbs">
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2019-06-12<span class="divider">|</span>
+ <li id="publishDate">Last Published: 2019-07-03<span class="divider">|</span>
</li>
<li id="projectVersion">Version: 1.14-SNAPSHOT</li>
</ul>
@@ -197,7 +206,30 @@
<li><a href="../../query/solr.html" title="Solr Index"><span class="none"></span>Solr Index</a> </li>
</ul>
</li>
- <li><a href="../../security/overview.html" title="Security"><span class="none"></span>Security</a> </li>
+ <li><a href="../../security/overview.html" title="Security"><span class="icon-chevron-down"></span>Security</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/introduction.html" title="Introduction"><span class="none"></span>Introduction</a> </li>
+ <li><a href="../../security/authentication.html" title="Authentication"><span class="icon-chevron-right"></span>Authentication</a> </li>
+ <li><a href="../../security/authorization.html" title="Authorization"><span class="icon-chevron-down"></span>Authorization</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/accesscontrol.html" title="Access Control Management"><span class="icon-chevron-right"></span>Access Control Management</a> </li>
+ <li><a href="../../security/permission.html" title="Permission Evaluation"><span class="icon-chevron-right"></span>Permission Evaluation</a> </li>
+ <li><a href="../../security/privilege.html" title="Privilege Management"><span class="icon-chevron-right"></span>Privilege Management</a> </li>
+ <li><a href="javascript:void(0)" title="Extensions"><span class="icon-chevron-down"></span>Extensions</a>
+ <ul class="nav nav-list">
+ <li><a href="../../security/authorization/restriction.html" title="Restrictions"><span class="none"></span>Restrictions</a> </li>
+ <li><a href="../../security/authorization/composite.html" title="Multiple Models"><span class="none"></span>Multiple Models</a> </li>
+ <li class="active"><a href="#"><span class="none"></span>Closed User Groups</a>
+ </li>
+ <li><a href="../../security/authorization/principalbased.html" title="Principal Based"><span class="none"></span>Principal Based</a> </li>
+ </ul>
+ </li>
+ </ul>
+ </li>
+ <li><a href="../../security/principal.html" title="Principal Management"><span class="icon-chevron-right"></span>Principal Management</a> </li>
+ <li><a href="../../security/user.html" title="User Management"><span class="icon-chevron-right"></span>User Management</a> </li>
+ </ul>
+ </li>
<li><a href="../../features/atomic-counter.html" title="Atomic Counter"><span class="none"></span>Atomic Counter</a> </li>
<li><a href="../../features/observation.html" title="Observation"><span class="none"></span>Observation</a> </li>
<li class="nav-header">Using Oak</li>
@@ -257,7 +289,7 @@
<h2><a name="Managing_Access_with_Closed_User_Groups_CUG"></a>Managing Access with “Closed User Groups” (CUG)</h2>
<div class="section">
<h3><a name="General"></a>General</h3>
-<p>The <tt>oak-authorization-cug</tt> module provides a alternative authorization model intended to limit read access to certain paths for a selected, small set of <tt>Principal</tt>s.</p>
+<p>The <tt>oak-authorization-cug</tt> module provides an alternative authorization model intended to limit read access to certain paths for a selected, small set of <tt>Principal</tt>s.</p>
<p>These restricted areas called <tt>CUG</tt> are marked by a dedicated policy type and effectively prevent read-access for anybody not explicitly allowed.</p>
<p>This implies that the CUG-authorization model solely evaluates and enforces read access to regular nodes and properties. Therefore it may only be used as an additional, complementary authorization scheme while the primary module(s) is/are in charge of enforcing the complete set of permissions including read/write access, repository operations and any kind of special permissions like reading and writing access control content. See section <a href="composite.html">Combining Multiple Authorization Models</a> for information aggregating access control management and permission evaluation from different implementations.</p>
<p>By default the <tt>oak-authorization-cug</tt> model is disabled and it requires manual <a href="#configuration">configuration</a> steps in order to plug it into the Oak security setup.</p>
@@ -270,12 +302,12 @@
<p><a name="jackrabbit_api"></a></p></div>
<div class="section">
<h3><a name="Jackrabbit_API"></a>Jackrabbit API</h3>
-<p>The Jackrabbit API defines an extension of the JCR <a class="externalLink" href="http://www.day.com/specs/javax.jcr/javadocs/jcr-2.0/javax/jcr/security/AccessControlPolicy.html">AccessControlPolicy</a> interface intended to grant the ability to perform certain actions to a set of <a class="externalLink" href="http://docs.oracle.com/javase/7/docs/api/java/security/Principal.html">Principal</a>s:</p>
+<p>The Jackrabbit API defines an extension of the JCR <a class="externalLink" href="https://docs.adobe.com/docs/en/spec/javax.jcr/javadocs/jcr-2.0/javax/jcr/security/AccessControlPolicy.html">AccessControlPolicy</a> interface intended to grant the ability to perform certain actions to a set of <a class="externalLink" href="http://docs.oracle.com/javase/7/docs/api/java/security/Principal.html">Principal</a>s:</p>
<ul>
<li><tt>PrincipalSetPolicy</tt></li>
</ul>
-<p>See <a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/trunk/jackrabbit-api/src/main/java/org/apache/jackrabbit/api/security/authorization/PrincipalSetPolicy.java">Jackrabbit API</a> for details and the methods exposed by the interface.</p>
+<p>See <a class="externalLink" href="http://jackrabbit.apache.org/api/2.12/index.html?org/apache/jackrabbit/api/security/authorization/PrincipalSetPolicy.html">Jackrabbit API</a> for details and the methods exposed by the interface.</p>
<p><a name="api_extensions"></a></p></div>
<div class="section">
<h3><a name="API_Extensions"></a>API Extensions</h3>
@@ -314,7 +346,7 @@
<h3><a name="Implementation_Details"></a>Implementation Details</h3>
<div class="section">
<h4><a name="Access_Control_Management"></a>Access Control Management</h4>
-<p>The access control management part of the CUG authorization models follows the requirements defined by JSR 283 the extensions defined by Jackrabbit API (see section <a href="../accesscontrol.html">Access Control Management</a> with the following characterstics:</p>
+<p>The access control management part of the CUG authorization models follows the requirements defined by JSR 283 and the extensions defined by Jackrabbit API (see section <a href="../accesscontrol.html">Access Control Management</a> with the following characterstics:</p>
<div class="section">
<h5><a name="Supported_Privileges"></a>Supported Privileges</h5>
<p>This implemenation of the <tt>JackrabbitAccessControlManager</tt> only supports a subset of privileges, namely <tt>jcr:read</tt>, <tt>rep:readProperties</tt>, <tt>rep:readNodes</tt>.</p></div>
@@ -339,7 +371,8 @@
<p>This further implies that the <tt>PermissionProvider</tt> will only evaluate regular read permissions (i.e. <tt>READ_NODE</tt> and <tt>READ_PROPERTY</tt>). Evaluation of any other <a href="../permission.html#oak_permissions">permissions</a> including reading the cug policy node (access control content) is consequently delegated to other authorization modules. In case there was no module dealing with these permissions, access will be denied (see in section <i>Combining Multiple Authorization Models</i> for <a href="composite.html#details">details</a>).</p></div>
<div class="section">
<h4><a name="Permission_Evaluation_with_Multiplexed_Stores"></a>Permission Evaluation with Multiplexed Stores</h4>
-<p>The CUG authorization module is not designed to be used in combination with non-default mounts. If any of the configured supported paths (see below) is found to be an ancestor of any non-default mount or included therein the activation/modification of the <tt>CugConfiguration</tt> will fail with immediately and log an error.</p></div></div>
+<p>The CUG authorization module is not designed to be used in combination with non-default mounts. If any of the configured supported paths (see below) is found to be an ancestor of any non-default mount or included therein the activation/modification of the <tt>CugConfiguration</tt> will fail with immediately and log an error.</p>
+<p><a name="representation"></a></p></div></div>
<div class="section">
<h3><a name="Representation_in_the_Repository"></a>Representation in the Repository</h3>
<p>CUG policies defined by this module in a dedicate node name <tt>rep:cugPolicy</tt> of type <tt>rep:CugPolicy</tt>. This node is defined by a dedicate mixin type <tt>rep:CugMixin</tt> (similar to <tt>rep:AccessControllable</tt>) and has a single mandatory, protected property which stores the name of principals that are granted read access in the restricted area:</p>