You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "angela (JIRA)" <ji...@apache.org> on 2019/03/21 13:24:00 UTC

[jira] [Created] (OAK-8155) CompositePermissionProvider: add possibility to abort evaluation

angela created OAK-8155:
---------------------------

             Summary: CompositePermissionProvider: add possibility to abort evaluation
                 Key: OAK-8155
                 URL: https://issues.apache.org/jira/browse/OAK-8155
             Project: Jackrabbit Oak
          Issue Type: New Feature
          Components: security, security-spi
            Reporter: angela
            Assignee: angela
             Fix For: 1.12


when aggregating multiple authorization models we currently have the ability to choose between CompositionType.AND and CompositionType.OR for the evaluation of effective permissions. In other words as soon as more than 1 PermissionProvider is present for the evaluation the results of that evaluation are either combined in an AND or OR fashion.

however, we currently lack the ability to stop or abort the evaluation if a given provider instance was 'sufficient' to determine if a given set of permissions is granted or denied. 

[~stillalex], let's discuss ideas and options on how we could achieve this.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)