You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by an...@apache.org on 2023/04/14 09:17:48 UTC
svn commit: r1909133 [2/3] - in /jackrabbit/site/live/oak/docs: ./ architecture/ coldstandby/ features/ nodestore/ nodestore/document/ nodestore/segment/ oak-mongo-js/ oak_api/ plugins/ query/ security/ security/accesscontrol/ security/authentication/ ...
Modified: jackrabbit/site/live/oak/docs/plugins/blobstore.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/plugins/blobstore.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/plugins/blobstore.html (original)
+++ jackrabbit/site/live/oak/docs/plugins/blobstore.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/plugins/blobstore.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/plugins/blobstore.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">The Blob Store <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/plugins/blobstore.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/elastic.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/elastic.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/elastic.html (original)
+++ jackrabbit/site/live/oak/docs/query/elastic.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/elastic.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/elastic.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Elastic Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/elastic.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
@@ -323,7 +323,9 @@ might be removed in the future.</li>
<li><code>blobSize</code> is ignored.</li>
<li><code>name</code> is ignored.</li>
<li><code>indexPath</code> is ignored.</li>
-<li><code>analyzers</code> is ignored, except for <code>indexOriginalTerm</code>.</li>
+<li><code>analyzers</code> support the Lucene configuration plus Elasticsearch specific <a class="externalLink" href="https://www.elastic.co/guide/en/elasticsearch/reference/current/configure-text-analysis.html">options</a>. Since Elasticsearch uses
+a more recent version of Lucene compared to the one in <code>oak-lucene</code> module, there might be differences in configuration options
+that could require changes when migrating from Lucene to Elasticsearch.</li>
<li><code>useInExcerpt</code> does not support regexp relative properties.</li>
<li>For property definitions, <code>sync</code> and <code>unique</code> are ignored.
Synchronous indexing, and enforcing uniqueness constraints is not currently supported in elastic indexes.</li>
Modified: jackrabbit/site/live/oak/docs/query/flags.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/flags.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/flags.html (original)
+++ jackrabbit/site/live/oak/docs/query/flags.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/flags.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/flags.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Flags <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/flags.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/grammar-sql2.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/grammar-sql2.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/grammar-sql2.html (original)
+++ jackrabbit/site/live/oak/docs/query/grammar-sql2.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/grammar-sql2.md.vm at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/grammar-sql2.md.vm at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Oak SQL-2 Query Grammar <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/grammar-sql2.md.vm"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/grammar-xpath.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/grammar-xpath.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/grammar-xpath.html (original)
+++ jackrabbit/site/live/oak/docs/query/grammar-xpath.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/grammar-xpath.md.vm at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/grammar-xpath.md.vm at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Oak XPath Query Grammar - Oak Documentation <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/grammar-xpath.md.vm"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/index-management.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/index-management.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/index-management.html (original)
+++ jackrabbit/site/live/oak/docs/query/index-management.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/index-management.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/index-management.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Index Management <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/index-management.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/indexing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/indexing.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/indexing.html (original)
+++ jackrabbit/site/live/oak/docs/query/indexing.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/indexing.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/indexing.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Indexing <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/indexing.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/lucene-old.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/lucene-old.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/lucene-old.html (original)
+++ jackrabbit/site/live/oak/docs/query/lucene-old.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/lucene-old.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/lucene-old.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Lucene Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/lucene-old.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/lucene.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/lucene.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/lucene.html (original)
+++ jackrabbit/site/live/oak/docs/query/lucene.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/lucene.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/lucene.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Lucene Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/lucene.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/oak-run-indexing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/oak-run-indexing.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/oak-run-indexing.html (original)
+++ jackrabbit/site/live/oak/docs/query/oak-run-indexing.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/oak-run-indexing.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/oak-run-indexing.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active "> Oak Run Indexing <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/oak-run-indexing.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/ootb-index-change.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/ootb-index-change.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/ootb-index-change.html (original)
+++ jackrabbit/site/live/oak/docs/query/ootb-index-change.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ootb-index-change.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ootb-index-change.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Changing Out-Of-The-Box Index Definitions <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/ootb-index-change.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/ordered-index-migrate.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/ordered-index-migrate.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/ordered-index-migrate.html (original)
+++ jackrabbit/site/live/oak/docs/query/ordered-index-migrate.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ordered-index-migrate.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ordered-index-migrate.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Migrating Ordered Index to Lucene Property <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/ordered-index-migrate.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/ordered-index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/ordered-index.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/ordered-index.html (original)
+++ jackrabbit/site/live/oak/docs/query/ordered-index.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ordered-index.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/ordered-index.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Ordered Index (deprecated since 1.1.8) <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/ordered-index.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/pre-extract-text.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/pre-extract-text.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/pre-extract-text.html (original)
+++ jackrabbit/site/live/oak/docs/query/pre-extract-text.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/pre-extract-text.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/pre-extract-text.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Pre-Extracting Text from Binaries <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/pre-extract-text.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/property-index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/property-index.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/property-index.html (original)
+++ jackrabbit/site/live/oak/docs/query/property-index.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/property-index.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/property-index.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">The Property Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/property-index.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/query-engine.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query-engine.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query-engine.html (original)
+++ jackrabbit/site/live/oak/docs/query/query-engine.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-engine.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-engine.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">The Query Engine <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query-engine.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/query-troubleshooting.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query-troubleshooting.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query-troubleshooting.html (original)
+++ jackrabbit/site/live/oak/docs/query/query-troubleshooting.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-troubleshooting.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query-troubleshooting.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Query Troubleshooting <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query-troubleshooting.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/query.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/query.html (original)
+++ jackrabbit/site/live/oak/docs/query/query.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/query.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Oak Query <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/query.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/search-mt.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/search-mt.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/search-mt.html (original)
+++ jackrabbit/site/live/oak/docs/query/search-mt.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/search-mt.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/search-mt.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Machine Translation for Search <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/search-mt.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/query/solr.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/query/solr.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/query/solr.html (original)
+++ jackrabbit/site/live/oak/docs/query/solr.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/solr.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/query/solr.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Solr Index <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/query/solr.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/release-schedule.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/release-schedule.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/release-schedule.html (original)
+++ jackrabbit/site/live/oak/docs/release-schedule.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/release-schedule.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/release-schedule.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Releases <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/release-schedule.md"><img src="./images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/roadmap.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/roadmap.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/roadmap.html (original)
+++ jackrabbit/site/live/oak/docs/roadmap.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/roadmap.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/roadmap.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Roadmap <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/roadmap.md"><img src="./images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
@@ -303,7 +303,7 @@ releases directly from <a class="externa
<li><a class="externalLink" href="https://jackrabbit.apache.org/jcr/downloads.html#latest">download</a></li>
</ul>
-<p>Starting with 1.48.0, these require Java 11.</p></section><section>
+<p>Starting with 1.50.0, these require Java 11.</p></section><section>
<h2><a name="Maintenance_branches"></a>Maintenance branches</h2>
<p>We currently support the following maintenance branches:</p>
<ul>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
@@ -315,12 +315,8 @@
<section>
<h2><a name="Access_Control_Management"></a>Access Control Management</h2><section>
<h3><a name="General"></a>General</h3>
-<p>This section covers fundamental concepts of the access control related APIs provided
-by JCR and Jackrabbit as well as the extensions points defined by Oak.</p>
-<p>If you are already familiar with the API and looking for examples you may directly
-read <a href="accesscontrol/editing.html">Using the Access Control Management API</a> for
-a comprehensive list of method calls as well as examples that may be used to
-edit the access control content of the repository.</p>
+<p>This section covers fundamental concepts of the access control related APIs provided by JCR and Jackrabbit as well as the extensions points defined by Oak.</p>
+<p>If you are already familiar with the API and looking for examples you may directly read <a href="accesscontrol/editing.html">Using the Access Control Management API</a> for a comprehensive list of method calls as well as examples that may be used to edit the access control content of the repository.</p>
<p><a name="jcr_api"></a></p></section><section>
<h3><a name="JCR_API"></a>JCR API</h3>
<p>Access Control Management is an optional feature defined by <a class="externalLink" href="https://s.apache.org/jcr-2.0-spec/16_Access_Control_Management.html">JSR 283</a> consisting of</p>
@@ -329,11 +325,8 @@ edit the access control content of the r
<p>• Privilege discovery: Determining the privileges that a user has in relation to a node.</p>
<p>• Assigning access control policies: Setting the privileges that a user has in relation to a node using access control policies specific to the implementation.</p>
</blockquote>
-<p>Whether or not a given implementation supports access control management is defined
-by the <code>Repository.OPTION_ACCESS_CONTROL_SUPPORTED</code> descriptor.</p>
-<p>Since Oak comes with a dedicated <a href="privilege.html">privilege management</a> this section
-focuses on reading and editing access control information. The main interfaces defined
-by JSR 283 are:</p>
+<p>Whether a given implementation supports access control management is defined by the <code>Repository.OPTION_ACCESS_CONTROL_SUPPORTED</code> descriptor.</p>
+<p>Since Oak comes with a dedicated <a href="privilege.html">privilege management</a> this section focuses on reading and editing access control information. The main interfaces defined by JSR 283 are:</p>
<ul>
<li><code>AccessControlManager</code>: Main entry point for access control related operations</li>
@@ -352,13 +345,12 @@ by JSR 283 are:</p>
<li><i>path-based</i>: policies are bound to nodes; a given node may have multiple policies; the <code>null</code> path identifies repository level policies.</li>
<li><i>transient</i>: access control related modifications are always transient</li>
<li><i>binding</i>: policies are decoupled from the repository; in order to bind a policy to a node or apply modifications made to an existing policy <code>AccessControlManager.setPolicy</code> must be called.</li>
-<li><i>effect</i>: policies bound to a given node only take effect upon <code>Session.save()</code>. Access to properties is defined by the their parent node.</li>
+<li><i>effect</i>: policies bound to a given node only take effect upon <code>Session.save()</code>. Access to properties is defined by their parent node.</li>
<li><i>scope</i>: a given policy may not only affect the node it is bound to but may have an effect on accessibility of items elsewhere in the workspace.</li>
</ul>
<p><a name="jackrabbit_api"></a></p></section><section>
<h3><a name="Jackrabbit_API"></a>Jackrabbit API</h3>
-<p>The Jackrabbit API defines various access control related extensions to the
-JCR API in order to cover common needs such as for example:</p>
+<p>The Jackrabbit API defines various access control related extensions to the JCR API in order to cover common needs such as for example:</p>
<ul>
<li><i>deny access</i>: access control entries can be defined to deny privileges at a given path (JCR only defines allowing access control entries)</li>
@@ -366,7 +358,7 @@ JCR API in order to cover common needs s
<li><i>convenience</i>:
<ul>
-<li>reordering of access control entries in a access control list</li>
+<li>reordering of access control entries in an access control list</li>
<li>retrieve the path of the node a given policy is (or can be) bound to</li>
</ul>
</li>
@@ -385,6 +377,9 @@ JCR API in order to cover common needs s
<li><code>JackrabbitAccessControlPolicy</code></li>
<li><code>JackrabbitAccessControlList</code></li>
<li><code>JackrabbitAccessControlEntry</code></li>
+<li><code>PrincipalAccessControlList</code> extends <code>JackrabbitAccessControlList</code> for principal-based ac-setup (see <a href="authorization/principalbased.html">Managing Access by Principal</a> for details)</li>
+<li><code>PrincipalAccessControlList.Entry</code> extends <code>JackrabbitAccessControlEntry</code> for principal-based ac-setup (see <a href="authorization/principalbased.html">Managing Access by Principal</a> for details)</li>
+<li><code>PrincipalSetPolicy</code> : grants a set principals the ability to perform certain actions (see <a href="authorization/cug.html">Managing Access with "Closed User Groups</a> for an example)</li>
</ul>
<p><a name="api_extensions"></a></p></section><section>
<h3><a name="API_Extensions"></a>API Extensions</h3>
@@ -392,30 +387,26 @@ JCR API in order to cover common needs s
<ul>
<li><code>PolicyOwner</code>: Interface to improve pluggability of the access control management
-and allows to termine if a giving manager handles a given policy.</li>
+and allows testing if a giving manager handles a given policy.</li>
<li><code>AccessControlConstants</code>: Constants related to access control management.</li>
</ul>
-<p>In addition it provides some access control related base classes in <code>org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol</code>
-that may be used for a custom implementation:</p>
+<p>In addition, it provides some access control related base classes in <code>org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol</code> that may be used for a custom implementation:</p>
<ul>
<li><code>AbstractAccessControlList</code>: abstract base implementation of the <code>JackrabbitAccessControlList</code> interface
<ul>
-<li><code>ImmutableACL</code>: immutable subclass of <code>AbstractAccessControlList</code></li>
-<li><code>ACE</code>: abstract subclass that implements common methods of a mutable access control list.</li>
+<li><code>ImmutableACL</code>: an immutable subclass of <code>AbstractAccessControlList</code></li>
+<li><code>ACE</code>: an abstract subclass that implements common methods of a mutable access control list.</li>
</ul>
</li>
-<li><code>ReadPolicy</code>: implementation of <code>NamedAccessControlPolicy</code> used to represent the configured <a href="permission/default.html#configuration">readable paths</a>.</li>
+<li><code>ReadPolicy</code>: an implementation of <code>NamedAccessControlPolicy</code> used to represent the configured <a href="permission/default.html#configuration">readable paths</a>.</li>
</ul><section>
<h4><a name="Restriction_Management"></a>Restriction Management</h4>
-<p>Oak 1.0 defines a dedicated restriction management API. See
-<a href="authorization/restriction.html">Restriction Management</a> for details and further
-information regarding extensibility and pluggability.</p>
+<p>Oak 1.0 defines a dedicated restriction management API. See <a href="authorization/restriction.html">Restriction Management</a> for details and further information regarding extensibility and pluggability.</p>
<p><a name="utilities"></a></p></section></section><section>
<h3><a name="Utilities"></a>Utilities</h3>
-<p>The jcr-commons module present with Jackrabbit provide some access control related
-utilities that simplify the creation of new policies and entries such as for example:</p>
+<p>The jcr-commons module present with Jackrabbit provide some access control related utilities that simplify the creation of new policies and entries such as for example:</p>
<ul>
<li><code>AccessControlUtils.getAccessControlList(Session, String)</code></li>
@@ -423,8 +414,7 @@ utilities that simplify the creation of
<li><code>AccessControlUtils.addAccessControlEntry(Session, String, Principal, String[], boolean)</code></li>
</ul>
<p>See
-<a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/trunk/jackrabbit-jcr-commons/src/main/java/org/apache/jackrabbit/commons/jackrabbit/authorization/AccessControlUtils.java">org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils</a> for
-the complete list of methods.</p><section><section>
+<a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/trunk/jackrabbit-jcr-commons/src/main/java/org/apache/jackrabbit/commons/jackrabbit/authorization/AccessControlUtils.java">org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils</a> for the complete list of methods.</p><section><section>
<h5><a name="Examples"></a>Examples</h5>
<div class="source"><pre class="prettyprint"><code>String path = node.getPath();
@@ -435,15 +425,10 @@ session.save();
</code></pre></div>
<p><a name="default_implementation"></a></p></section></section></section><section>
<h3><a name="Characteristics_of_the_Default_Implementation"></a>Characteristics of the Default Implementation</h3>
-<p>The behavior of the default access control implementation is described in sections
-<a href="accesscontrol/default.html">Access Control Management: The Default Implementation</a><br />
-and <a href="authorization/restriction.html">Restriction Management</a>.</p>
+<p>The behavior of the default access control implementation is described in sections <a href="accesscontrol/default.html">Access Control Management: The Default Implementation</a> and <a href="authorization/restriction.html">Restriction Management</a>.</p>
<p><a name="configuration"></a></p></section><section>
<h3><a name="Configuration"></a>Configuration</h3>
-<p>The configuration of the access control management implementation is handled
-within the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/AuthorizationConfiguration.html">AuthorizationConfiguration</a>, which is used for all authorization
-related matters. This class provides the following two access control related
-methods:</p>
+<p>The configuration of the access control management implementation is handled within the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/AuthorizationConfiguration.html">AuthorizationConfiguration</a>, which is used for all authorization related matters. This class provides the following two access control related methods:</p>
<ul>
<li><code>getAccessControlManager</code>: get a new ac manager instance.</li>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/default.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/default.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/default.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/default.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management : The Default Implementation <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/default.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/differences.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/differences.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Access Control Management : Differences wrt Jackrabbit 2.x <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/differences.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/editing.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/accesscontrol/editing.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Using the Access Control Management API <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/accesscontrol/editing.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
@@ -312,26 +312,83 @@
See the License for the specific language governing permissions and
limitations under the License.
-->
-<section>
-<h2><a name="Using_the_Access_Control_Management_API"></a>Using the Access Control Management API</h2>
+<h1>Using the Access Control Management API</h1>
+<ul>
+<li><a href="#Reading">Reading</a>
+<ul>
+<li><a href="#Privilege_Discovery">Privilege Discovery</a>
+<ul>
+<li><a href="#Discover.2Ftest_privileges_for_the_editing_session">Discover/test privileges for the editing session</a></li>
+<li><a href="#Discover.2Ftest_privileges_for_a_set_of_principal">Discover/test privileges for a set of principal</a></li>
+<li><a href="#PrivilegeCollection_for_improved_discovery">PrivilegeCollection for improved discovery</a></li>
+<li><a href="#Note">Note</a></li></ul></li>
+<li><a href="#Reading_Policies">Reading Policies</a>
+<ul>
+<li><a href="#Examples">Examples</a>
+<ul>
+<li><a href="#Read_policies_bound_to_a_node">Read policies bound to a node</a></li>
+<li><a href="#Read_policies_that_have_not_yet_been_bound_to_the_node">Read policies that have not yet been bound to the node</a></li>
+<li><a href="#Read_policies_bound_to_a_principal">Read policies bound to a principal</a></li>
+<li><a href="#Read_policies_that_have_not_yet_been_bound_to_th_principal">Read policies that have not yet been bound to th principal</a></li></ul></li></ul></li>
+<li><a href="#Reading_Policy_Content">Reading Policy Content</a></li>
+<li><a href="#Reading_Effective_Policies">Reading Effective Policies</a>
+<ul>
+<li><a href="#Note">Note</a></li></ul></li></ul></li>
+<li><a href="#Writing">Writing</a>
+<ul>
+<li><a href="#Adding_Policies">Adding Policies</a>
+<ul>
+<li><a href="#Examples">Examples</a>
+<ul>
+<li><a href="#Bind_a_policy_to_a_node">Bind a policy to a node</a></li>
+<li><a href="#Bind_a_principal-based_policy_to_a_node">Bind a principal-based policy to a node</a></li></ul></li></ul></li>
+<li><a href="#Modifying_Policies">Modifying Policies</a>
+<ul>
+<li><a href="#Retrieve_Principals">Retrieve Principals</a></li>
+<li><a href="#Retrieve_Privileges">Retrieve Privileges</a></li>
+<li><a href="#Examples">Examples</a>
+<ul>
+<li><a href="#Modify_an_AccessControlList">Modify an AccessControlList</a></li>
+<li><a href="#Create_or_Modify_an_AccessControlList">Create or Modify an AccessControlList</a></li>
+<li><a href="#Edit_a_principal-based_AccessControlList">Edit a principal-based AccessControlList</a></li></ul></li></ul></li>
+<li><a href="#Removing_Policies">Removing Policies</a>
+<ul>
+<li><a href="#Examples">Examples</a>
+<ul>
+<li><a href="#Remove_a_policy">Remove a policy</a></li></ul></li></ul></li>
+<li><a href="#Access_Control_on_Repository_Level">Access Control on Repository Level</a>
+<ul>
+<li><a href="#Examples">Examples</a>
+<ul>
+<li><a href="#Allow_a_Principal_to_Register_Namespaces">Allow a Principal to Register Namespaces</a></li></ul></li></ul></li></ul></li></ul>
+
<p><a name="read"></a></p><section>
-<h3><a name="Reading"></a>Reading</h3><section>
-<h4><a name="Privilege_Discovery"></a>Privilege Discovery</h4>
-<p>Discover/test privileges for the editing session:</p>
+<h2><a name="Reading"></a>Reading</h2><section>
+<h3><a name="Privilege_Discovery"></a>Privilege Discovery</h3><section>
+<h4><a name="Discover.2Ftest_privileges_for_the_editing_session"></a>Discover/test privileges for the editing session</h4>
+<p>Note that these methods require the editing session to have <code>READ_ACCESS_CONTROL</code> permission for the specified path.</p>
<ul>
-<li><code>AccessControlManager</code>
+<li>
+
+<p><code>AccessControlManager</code></p>
<ul>
<li><code>hasPrivileges(String, Privilege[])</code></li>
<li><code>getPrivileges(String)</code></li>
</ul>
</li>
+<li>
+
+<p><code>JackrabbitAccessControlManager</code></p>
+<ul>
+
+<li><code>getPrivilegeCollection(String absPath)</code> : improved, performant way to inspect privileges (since Oak 1.42.0, see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-9494">OAK-9494</a>)</li>
</ul>
-<p>Discover/test privileges for a set of principal that may differ from those associated
-with the reading subject. Note that this method requires editing session to be
-able to have <code>READ_ACCESS_CONTROL</code> permission on the node associated with the specified
-path.</p>
+</li>
+</ul></section><section>
+<h4><a name="Discover.2Ftest_privileges_for_a_set_of_principal"></a>Discover/test privileges for a set of principal</h4>
+<p>The following methods can be used to discover privileges for a set of principals different from those associated with the reading subject.</p>
<ul>
<li><code>JackrabbitAccessControlManager</code>
@@ -339,21 +396,29 @@ path.</p>
<li><code>hasPrivileges(String, Set<Principal>, Privilege[])</code></li>
<li><code>getPrivileges(String, Set<Principal>, Privilege[])</code></li>
+<li><code>getPrivilegeCollection(String absPath, Set<Principal> principals)</code>: improved, performant way to inspect privileges (since Oak 1.42.0, see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-9494">OAK-9494</a>)</li>
</ul>
</li>
-</ul><section>
-<h5><a name="Note"></a>Note</h5>
-<p>Usually it is not required for a application to check the privileges/permissions
-of a given session (or set of principals) as this evaluation can be left
-to the repository.
-For rare cases where the application needs to understand if a given set of
-principals is actually allowed to perform a given action, it is recommend to
-use <code>Session.hasPermission(String, String)</code> and either pass the actions strings
-defined by JCR or the names of the Oak permissions.</p>
-<p>See section <a href="../permission/permissionsandprivileges.html">Permissions vs Privileges</a> for an
-comprehensive overview on the differences between testing permissions on <code>Session</code>
-and privileges on <code>AccessControlManager</code>.</p></section></section><section>
-<h4><a name="Reading_Policies"></a>Reading Policies</h4>
+</ul></section><section>
+<h4><a name="PrivilegeCollection_for_improved_discovery"></a>PrivilegeCollection for improved discovery</h4>
+<p>The <code>PrivilegeCollection</code> interface wraps around a set of privileges. It allows for efficient and repeated privilege testing and avoids manual resolution of privilege aggregation.
+Since Oak 1.42.0. For additional details see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-9494">OAK-9494</a>.</p>
+<ul>
+
+<li><code>PrivilegeCollection</code>
+<ul>
+
+<li><code>getPrivileges()</code></li>
+<li><code>includes(@NotNull String... privilegeNames)</code></li>
+</ul>
+</li>
+</ul></section><section>
+<h4><a name="Note"></a>Note</h4>
+<p>Usually it is not required for an application to check the privileges/permissions of a given session (or set of principals) as this evaluation can be left to the repository.
+For rare cases where the application needs to understand if a given set of principals is actually allowed to perform a given action, it is recommend to use <code>Session.hasPermission(String, String)</code> and either pass the actions strings defined by JCR or the names of the Oak permissions.
+If evaluation of multiple privileges is required (e.g. custom privileges), <code>JackrabbitAccessControlManager.getPrivilegeCollection</code> is an improved variant the avoids manually resolving aggregation and repeated expensive calls.</p>
+<p>See section <a href="../permission/permissionsandprivileges.html">Permissions vs Privileges</a> for a comprehensive overview on the differences between testing permissions on <code>Session</code> and privileges on <code>AccessControlManager</code>.</p></section></section><section>
+<h3><a name="Reading_Policies"></a>Reading Policies</h3>
<ul>
<li>
@@ -375,18 +440,34 @@ and privileges on <code>AccessControlMan
</ul>
</li>
</ul><section>
-<h5><a name="Examples"></a>Examples</h5><section>
-<h6><a name="Read_policies_bound_to_a_node"></a>Read policies bound to a node</h6>
+<h4><a name="Examples"></a>Examples</h4><section>
+<h5><a name="Read_policies_bound_to_a_node"></a>Read policies bound to a node</h5>
<div class="source"><pre class="prettyprint"><code>AccessControlManager acMgr = session.getAccessControlManager();
AccessControlPolicy[] policies = acMgr.getPolicies("/content");
</code></pre></div></section><section>
-<h6><a name="Read_policies_that_have_not_yet_been_bound_to_the_node"></a>Read policies that have not yet been bound to the node</h6>
+<h5><a name="Read_policies_that_have_not_yet_been_bound_to_the_node"></a>Read policies that have not yet been bound to the node</h5>
<div class="source"><pre class="prettyprint"><code>AccessControlManager acMgr = session.getAccessControlManager();
AccessControlPolicyIterator it = acMgr.getApplicablePolicies("/content");
+</code></pre></div></section><section>
+<h5><a name="Read_policies_bound_to_a_principal"></a>Read policies bound to a principal</h5>
+<p>Note: depending on the setup the array of policies may contain <code>PrincipalAccessControlList</code> (see below)</p>
+
+<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlManager acMgr = ...
+PrincipalManager principalManager = jackrabbitSession.getPrincipalManager();
+Principal principal = principalManager.getPrincipal("principalName");
+AccessControlPolicy[] policies = acMgr.getPolicies(principal);
+</code></pre></div></section><section>
+<h5><a name="Read_policies_that_have_not_yet_been_bound_to_th_principal"></a>Read policies that have not yet been bound to th principal</h5>
+<p>Note: depending on the setup the array of policies may contain non-JCR types like <code>PrincipalAccessControlList</code> (see below)</p>
+
+<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlManager acMgr = ...
+PrincipalManager principalManager = jackrabbitSession.getPrincipalManager();
+Principal principal = principalManager.getPrincipal("principalName");
+AccessControlPolicy[] policies = acMgr.getApplicablePolicies(principal);
</code></pre></div></section></section></section><section>
-<h4><a name="Reading_Policy_Content"></a>Reading Policy Content</h4>
+<h3><a name="Reading_Policy_Content"></a>Reading Policy Content</h3>
<ul>
<li>
@@ -410,14 +491,23 @@ AccessControlPolicyIterator it = acMgr.g
</li>
<li>
+<p><code>PrincipalAccessControlList</code> : extension of <code>JackrabbitAccessControlList</code> for principal-based access control setup</p>
+<ul>
+
+<li><code>getPrincipal()</code> : the principal for which all entries in the list are being defined</li>
+</ul>
+</li>
+<li>
+
<p><code>PrincipalSetPolicy</code></p>
<ul>
-<li><code>getPrincipals()</code></li>
+<li><code>getPrincipals()</code> : the set of principals for which the policy applies</li>
</ul>
</li>
</ul></section><section>
-<h4><a name="Reading_Effective_Policies"></a>Reading Effective Policies</h4>
+<h3><a name="Reading_Effective_Policies"></a>Reading Effective Policies</h3>
+<p>Inspect which policies take effect in order to help understand why certain permissions are granted or denied.</p>
<ul>
<li>
@@ -425,7 +515,7 @@ AccessControlPolicyIterator it = acMgr.g
<p><code>AccessControlManager</code></p>
<ul>
-<li><code>getEffectivePolicies(String)</code></li>
+<li><code>getEffectivePolicies(String absPath)</code> : All policies that take effect at the specified path</li>
</ul>
</li>
<li>
@@ -433,13 +523,21 @@ AccessControlPolicyIterator it = acMgr.g
<p><code>JackrabbitAccessControlManager</code></p>
<ul>
-<li><code>getEffectivePolicies(Set<Principal>)</code></li>
+<li><code>getEffectivePolicies(Set<Principal> principals)</code> : All policies that take effect for the given set of principals (e.g. as they would be added to the <code>Subject</code> upon repository login)</li>
+<li><code>getEffectivePolicies(Set<Principal> principals, String... absPaths)</code> : All policies that take effect for the given set of principals filtered for the specified paths (since Oak 1.52.0, see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-10130">OAK-10130</a>)</li>
</ul>
</li>
+</ul><section>
+<h4><a name="Note"></a>Note</h4>
+<ul>
+
+<li>Retrieving effective policies is best-effort</li>
+<li>The list of effective policies will also include policies that are defined by a configuration or implementation and have not been explicit bound to a node/principal through access control write operations.</li>
+<li>Therefore, make sure to not rely on effective policies to have a specific type</li>
</ul>
-<p><a name="write"></a></p></section></section><section>
-<h3><a name="Writing"></a>Writing</h3><section>
-<h4><a name="Adding_Policies"></a>Adding Policies</h4>
+<p><a name="write"></a></p></section></section></section><section>
+<h2><a name="Writing"></a>Writing</h2><section>
+<h3><a name="Adding_Policies"></a>Adding Policies</h3>
<ul>
<li><code>AccessControlManager</code>
@@ -449,8 +547,8 @@ AccessControlPolicyIterator it = acMgr.g
</ul>
</li>
</ul><section>
-<h5><a name="Examples"></a>Examples</h5><section>
-<h6><a name="Bind_a_policy_to_a_node"></a>Bind a policy to a node</h6>
+<h4><a name="Examples"></a>Examples</h4><section>
+<h5><a name="Bind_a_policy_to_a_node"></a>Bind a policy to a node</h5>
<div class="source"><pre class="prettyprint"><code>AccessControlPolicyIterator it = acMgr.getApplicablePolicies("/content");
while (it.hasNext()) {
@@ -460,11 +558,23 @@ while (it.hasNext()) {
session.save();
}
}
+</code></pre></div></section><section>
+<h5><a name="Bind_a_principal-based_policy_to_a_node"></a>Bind a principal-based policy to a node</h5>
+
+<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlManager acMgr = ...
+Privilege[] privileges = ...
+for (JackrabbitAccessControlPolicy policy : acMgr.getApplicablePolicies(principal)) {
+ if (policy instanceof PrincipalAccessControlList) {
+ // NOTE: the path to bind the policy is retrieved from the policy and is not the path where the added entry takes effect!
+ acMgr.setPolicy(policy.getPath(), policy);
+ session.save();
+ }
+}
</code></pre></div></section></section></section><section>
-<h4><a name="Modifying_Policies"></a>Modifying Policies</h4>
-<p>Modification of policies is specific to the policy type. JCR/Jackrabbit API only
-define a single mutable type of policies: the access control list. Depending on
-the access control implementation there may be other mutable policies.</p>
+<h3><a name="Modifying_Policies"></a>Modifying Policies</h3>
+<p>Modification of policies is specific to the policy type. JCR/Jackrabbit API defines the following mutable
+types of policies. Depending on the configured access control setup (and the level of customization) there may be other
+mutable policies.</p>
<ul>
<li>
@@ -489,6 +599,15 @@ the access control implementation there
</li>
<li>
+<p><code>PrincipalAccessControlList</code> : extension of <code>JackrabbitAccessControlList</code> for principal-based access control setup</p>
+<ul>
+
+<li><code>addEntry(String effectivePath, Privilege[] privileges)</code> : binds an entry to the path where it is expected to take effect.</li>
+<li><code>addEntry(String effectivePath, Privilege[] privileges, Map<String, Value> restrictions, Map<String, Value[]> mvRestrictions)</code> : binds an entry with restrictions to the path where it is expected to take effect</li>
+</ul>
+</li>
+<li>
+
<p><code>PrincipalSetPolicy</code></p>
<ul>
@@ -510,14 +629,13 @@ the access control implementation there
</ul>
</li>
</ul><section>
-<h5><a name="Retrieve_Principals"></a>Retrieve Principals</h5>
+<h4><a name="Retrieve_Principals"></a>Retrieve Principals</h4>
<p>The default and recommended ways to obtain <code>Principal</code>s for access control management
is through the principal management API:</p>
<ul>
<li><code>PrincipalManager</code> (see section <a href="../principal.html">Principal Management</a>)
-- <code>getPrincipal(String)</code>
-- <code>getPrivilege(String)</code></li>
+- <code>getPrincipal(String)</code></li>
</ul>
<p>One way of representing principals in the repository is by the means of user management:
If user management is supported in a given Oak repository (see <a href="/oak/docs/apidocs/org/apache/jackrabbit/api/JackrabbitRepository.html">OPTION_USER_MANAGEMENT_SUPPORTED</a>
@@ -531,7 +649,7 @@ by calling:</p>
<p>Note however, that this will only work for principals backed by a user/group.
Principals provided by a different principal management implementation won't be
accessible through user management.</p></section><section>
-<h5><a name="Retrieve_Privileges"></a>Retrieve Privileges</h5>
+<h4><a name="Retrieve_Privileges"></a>Retrieve Privileges</h4>
<ul>
<li>
@@ -563,8 +681,8 @@ accessible through user management.</p><
<p><code>Privilege</code>: defines name constants for the privileges defined by JCR</p>
</li>
</ul></section><section>
-<h5><a name="Examples"></a>Examples</h5><section>
-<h6><a name="Modify_an_AccessControlList"></a>Modify an AccessControlList</h6>
+<h4><a name="Examples"></a>Examples</h4><section>
+<h5><a name="Modify_an_AccessControlList"></a>Modify an AccessControlList</h5>
<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlList acl = null;
// try if there is an acl that has been set before
@@ -584,7 +702,7 @@ if (acl != null) {
session.save();
}
</code></pre></div></section><section>
-<h6><a name="Create_or_Modify_an_AccessControlList"></a>Create or Modify an AccessControlList</h6>
+<h5><a name="Create_or_Modify_an_AccessControlList"></a>Create or Modify an AccessControlList</h5>
<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlList acl = null;
// try if there is an acl that has been set before
@@ -615,7 +733,7 @@ if (acl != null) {
session.save();
}
</code></pre></div>
-<p>or alternatively use <code>AccessControlUtils</code>:</p>
+<p>Alternatively, use <code>AccessControlUtils</code>:</p>
<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlList acl = AccessControlUtils.getAccessControlList(session, "/content");
if (acl != null) {
@@ -627,8 +745,26 @@ if (acl != null) {
acMgr.setPolicy(acl.getPath(), acl);
session.save();
}
+</code></pre></div></section><section>
+<h5><a name="Edit_a_principal-based_AccessControlList"></a>Edit a principal-based AccessControlList</h5>
+
+<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlManager acMgr = ...
+ValueFactory vf = ...
+for (JackrabbitAccessControlPolicy policy : acMgr.getPolicies(principal)) {
+ if (policy instanceof PrincipalAccessControlList) {
+ PrincipalAccessControlList acl = (PrincipalAccessControlList) policy;
+ // add entries specifying the path where they take effect
+ acl.addEntry("/content", AccessControlUtils.privilegesFromNames(acMgr, Privilege.JCR_READ));
+ Map<String, Value[]> mvRestrictions = ImmutableMap.of("rep:subtrees", new Value[] {vf.createValue("subtree1"), vf.createValue("subtree2"});
+ acl.addEntry("/var", AccessControlUtils.privilegesFromNames(acMgr, Privilege.JCR_READ), Collections.emptyMap(), mvRestrictions);
+
+ // NOTE: the path to bind the policy is retrieved from the policy and is not the path where the added entry takes effect!
+ acMgr.setPolicy(policy.getPath(), policy);
+ session.save();
+ }
+}
</code></pre></div></section></section></section><section>
-<h4><a name="Removing_Policies"></a>Removing Policies</h4>
+<h3><a name="Removing_Policies"></a>Removing Policies</h3>
<ul>
<li><code>AccessControlManager</code>
@@ -638,8 +774,8 @@ if (acl != null) {
</ul>
</li>
</ul><section>
-<h5><a name="Examples"></a>Examples</h5><section>
-<h6><a name="Remove_a_policy"></a>Remove a policy</h6>
+<h4><a name="Examples"></a>Examples</h4><section>
+<h5><a name="Remove_a_policy"></a>Remove a policy</h5>
<div class="source"><pre class="prettyprint"><code>for (AccessControlPolicy policy : acMgr.getPolicies("/content");
if (policy instanceof NamedAccessControlPolicy && "myPolicy".equals((NamedAccessControlPolicy) policy).getName()) {
@@ -648,10 +784,12 @@ if (acl != null) {
}
}
</code></pre></div>
-<p><a name="repository_level"></a></p></section></section></section></section><section>
-<h3><a name="Access_Control_on_Repository_Level"></a>Access Control on Repository Level</h3><section><section>
-<h5><a name="Examples"></a>Examples</h5><section>
-<h6><a name="Allow_a_Principal_to_Register_Namespaces"></a>Allow a Principal to Register Namespaces</h6>
+<p><a name="repository_level"></a></p></section></section></section><section>
+<h3><a name="Access_Control_on_Repository_Level"></a>Access Control on Repository Level</h3>
+<p>A <code>null</code> path serves as placeholder to retrieve and edit policies that take effect at the repository as a whole instead
+of being bound to or taking effect at a specific node path. For example being able to administer the namespace registry.</p><section>
+<h4><a name="Examples"></a>Examples</h4><section>
+<h5><a name="Allow_a_Principal_to_Register_Namespaces"></a>Allow a Principal to Register Namespaces</h5>
<div class="source"><pre class="prettyprint"><code>JackrabbitAccessControlList acl = AccessControlUtils.getAccessControlList(session, null);
if (acl != null) {
@@ -663,7 +801,7 @@ if (acl != null) {
acMgr.setPolicy(null, acl);
session.save();
}
-</code></pre></div><!-- hidden references --></section></section></section></section></section>
+</code></pre></div><!-- hidden references --></section></section></section></section>
</main>
</div>
</div>
Modified: jackrabbit/site/live/oak/docs/security/authentication.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication.md"><img src="../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/default.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/default.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/default.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/default.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication : Implementation Details <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/default.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/differences.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/differences.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/differences.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/differences.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication : Differences wrt Jackrabbit 2.x <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/differences.md"><img src="../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/bestpractices.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/bestpractices.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/bestpractices.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/bestpractices.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/bestpractices.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/bestpractices.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Best Practices for External Authentication <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/bestpractices.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/defaultusersync.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/defaultusersync.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">User and Group Synchronization : The Default Implementation <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/defaultusersync.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/dynamic.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/dynamic.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">User and Group Synchronization : Dynamic Membership and Dynamic Groups <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/dynamic.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/externallogin_examples.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/externallogin_examples.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">Authentication with External Login Module : Examples <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/externallogin_examples.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/faq.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/faq.html?rev=1909133&r1=1909132&r2=1909133&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/faq.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/faq.html Fri Apr 14 09:17:46 2023
@@ -2,7 +2,7 @@
<!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/faq.md at 2023-02-21
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src/site/markdown/security/authentication/external/faq.md at 2023-04-14
| Rendered using Apache Maven Fluido Skin 1.11.1
-->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -174,7 +174,7 @@
<li class=""><a href="https://jackrabbit.apache.org/" class="externalLink" title="Jackrabbit">Jackrabbit</a><span class="divider">/</span></li>
<li class=""><a href="https://jackrabbit.apache.org/oak/docs/" class="externalLink" title="Oak">Oak</a><span class="divider">/</span></li>
<li class="active ">External Authentication : FAQ <a href="https://github.com/apache/jackrabbit-oak/edit/trunk/oak-doc/src/site/markdown/security/authentication/external/faq.md"><img src="../../../images/accessories-text-editor.png" title="Edit" /></a></li>
- <li id="publishDate" class="pull-right">Last Published: 2023-02-21</li>
+ <li id="publishDate" class="pull-right">Last Published: 2023-04-14</li>
</ul>
</div>
</header>