You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jackrabbit.apache.org by an...@apache.org on 2017/01/17 13:53:10 UTC
svn commit: r1779196 [2/3] - in /jackrabbit/site/live/oak/docs: ./ META-INF/
architecture/ coldstandby/ features/ nodestore/ nodestore/segment/ oak_api/
plugins/ query/ security/ security/accesscontrol/ security/authentication/
security/authentication/...
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/default.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/default.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Access Control Management : The Default Implementation</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -623,7 +623,7 @@
<div class="section">
<h4>Restrictions<a name="Restrictions"></a></h4>
<p>Access control entries may be created by limiting their effect by adding restrictions as mentioned by JSR 283. Details about the restriction management in Oak 1.0 as well as a list of built-in restrictions and extensibility can be found in section <a href="../authorization/restriction.html">Restriction Management</a>.</p>
-<p><a href="representation"></a></p></div></div>
+<p><a name="representation"></a></p></div></div>
<div class="section">
<h3>Representation in the Repository<a name="Representation_in_the_Repository"></a></h3>
<p>All access control policies defined with an Oak repository are stores child of the node they are bound to. The node type definition used to represent access control content:</p>
@@ -908,7 +908,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/differences.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Access Control Management : Differences wrt Jackrabbit 2.x</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -542,7 +542,7 @@
<h4>Additional Functionality<a name="Additional_Functionality"></a></h4>
<div class="section">
<h5>Principal-based Access Control<a name="Principal-based_Access_Control"></a></h5>
-<p>The principal-based access control management as present in Jackrabbit-core is no longer present with OAK. The main benefit of the principal-based approach has been incorporated with the changes in the default <a href="differences_permissions.html">permission evaluation</a>). In addition the default access control manager implementation supports all methods defined by <tt>JackrabbitAccessControlManager</tt>; i.e. editing access control information by principal is possible as long as the editing session has sufficient permission on the target node(s). Similarly, the per principal policies exposed to a given session will always respect that access rights of that session.</p></div>
+<p>The principal-based access control management as present in Jackrabbit-core is no longer present with OAK. The main benefit of the principal-based approach has been incorporated with the changes in the default <a href="../permission/differences.html">permission evaluation</a>). In addition the default access control manager implementation supports all methods defined by <tt>JackrabbitAccessControlManager</tt>; i.e. editing access control information by principal is possible as long as the editing session has sufficient permission on the target node(s). Similarly, the per principal policies exposed to a given session will always respect that access rights of that session.</p></div>
<div class="section">
<h5>Restrictions<a name="Restrictions"></a></h5>
<p>The implementation of additional restrictions associated with an ACE has been slighly modified/extended.</p>
@@ -582,7 +582,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html (original)
+++ jackrabbit/site/live/oak/docs/security/accesscontrol/editing.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Using the Access Control Management API</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -927,7 +927,7 @@ if (acl != null) {
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-24
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161124" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authentication</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-24</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -768,7 +768,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/default.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/default.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-24
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161124" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authentication : Implementation Details</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-24</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -551,7 +551,7 @@
<pre>String wspName = null;
Session anonymous = repository.login(new GuestCredentials(), wspName);
</pre></div>
-<p>As of Oak 1.0 <tt>Repository#login()</tt> and <tt>Repository#login(null, wspName)</tt> is no longer treated as guest login. This behavior of Jackrabbit-core is violating the specification, which defines that null-login should be used for those cases where the authentication process is handled outside of the repository (see <a href="authentication/preauthentication.html">Pre-Authentication</a>).</p>
+<p>As of Oak 1.0 <tt>Repository#login()</tt> and <tt>Repository#login(null, wspName)</tt> is no longer treated as guest login. This behavior of Jackrabbit-core is violating the specification, which defines that null-login should be used for those cases where the authentication process is handled outside of the repository (see <a href="preauthentication.html">Pre-Authentication</a>).</p>
<p>Similarly, any special treatment that Jackrabbit core applied for the guest (anonymous) user has been omitted altogether from the default <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authentication/user/LoginModuleImpl.html">LoginModuleImpl</a>. In the default setup the built-in anonymous user will be created without any password. Therefore explicitly uid/pw login using the anonymous userId will no longer work. This behavior is now consistent with the default login of any other user which doesn’t have a password set.</p>
<div class="section">
<h5>GuestLoginModule<a name="GuestLoginModule"></a></h5>
@@ -592,11 +592,11 @@ Session anonymous = repository.login(new
<li>Default (<tt>LoginModuleImpl</tt>) as described below</li>
-<li><tt>ExternalLoginModule</tt> as described in section <a href="authentication/externalloginmodule.html">External Authentication</a></li>
+<li><tt>ExternalLoginModule</tt> as described in section <a href="externalloginmodule.html">External Authentication</a></li>
</ul>
<div class="section">
<h5>LoginModuleImpl<a name="LoginModuleImpl"></a></h5>
-<p>The <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authentication/user/LoginModuleImpl.html">LoginModuleImpl</a> defines a regular userId/password login and requires a repository setup that supports <a href="user.html">User Management</a> and is designed to supports the following <tt>Credentials</tt>:</p>
+<p>The <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authentication/user/LoginModuleImpl.html">LoginModuleImpl</a> defines a regular userId/password login and requires a repository setup that supports <a href="../user.html">User Management</a> and is designed to supports the following <tt>Credentials</tt>:</p>
<ul>
@@ -665,7 +665,7 @@ Session anonymous = repository.login(new
<li><b>Self-Impersonation</b>: Any attempt to impersonate the same session will succeed as long as the user is still valid (i.e. exists and has not been disabled).</li>
-<li><b>Regular Impersonation</b>: Impersonation another user will only succeed if the impersonated user is valid (i.e. exists and is not disabled) <i>and</i> the the user associated with the editing session is allowed to impersonate this user. The latter depends on the <a href="user.html">User Management</a> implementation specifically on the return value of <tt>User.getImpersonation().allows(Subject subject)</tt>.</li>
+<li><b>Regular Impersonation</b>: Impersonation another user will only succeed if the impersonated user is valid (i.e. exists and is not disabled) <i>and</i> the the user associated with the editing session is allowed to impersonate this user. The latter depends on the <a href="../user.html">User Management</a> implementation specifically on the return value of <tt>User.getImpersonation().allows(Subject subject)</tt>.</li>
</ul>
<div class="section">
<h5>ImpersonationCredentials<a name="ImpersonationCredentials"></a></h5>
@@ -686,10 +686,10 @@ Session anonymous = repository.login(new
<p><a name="token"></a></p></div></div>
<div class="section">
<h4>Token Login<a name="Token_Login"></a></h4>
-<p>See section <a href="authentication/tokenmanagement.html">Token Authentication</a> for details regarding token based authentication.</p>
+<p>See section <a href="tokenmanagement.html">Token Authentication</a> for details regarding token based authentication.</p>
<div class="section">
<h5>TokenLoginModule<a name="TokenLoginModule"></a></h5>
-<p>The <tt>TokenLoginModule</tt> is in charge of creating new login tokens and validate repository logins with <tt>TokenCredentials</tt>. The exact behavior of this login module is described in section <a href="authentication/tokenmanagement.html">Token Authentication</a>.</p>
+<p>The <tt>TokenLoginModule</tt> is in charge of creating new login tokens and validate repository logins with <tt>TokenCredentials</tt>. The exact behavior of this login module is described in section <a href="tokenmanagement.html">Token Authentication</a>.</p>
<p><a name="pre_authenticated"></a></p></div></div>
<div class="section">
<h4>Pre-Authenticated Login<a name="Pre-Authenticated_Login"></a></h4>
@@ -701,7 +701,7 @@ Session anonymous = repository.login(new
<li>Pre-Authentication without Repository Involvement (aka <tt>null</tt> login)</li>
</ul>
-<p>See section <a href="authentication/preauthentication.html">Pre-Authentication Login</a> for further details and examples.</p>
+<p>See section <a href="preauthentication.html">Pre-Authentication Login</a> for further details and examples.</p>
<p><a name="external"></a></p></div>
<div class="section">
<h4>External Login<a name="External_Login"></a></h4>
@@ -709,18 +709,18 @@ Session anonymous = repository.login(new
<ul>
-<li><a href="authentication/externalloginmodule.html">External Authentication</a>: Summary of the external authentication and details about the <tt>ExternalLoginModule</tt>.</li>
+<li><a href="externalloginmodule.html">External Authentication</a>: Summary of the external authentication and details about the <tt>ExternalLoginModule</tt>.</li>
-<li><a href="authentication/usersync.html">User and Group Synchronization</a>: Details regarding user and group synchronization as well as a list of configuration options provided by the the default implementations present with Oak.</li>
+<li><a href="usersync.html">User and Group Synchronization</a>: Details regarding user and group synchronization as well as a list of configuration options provided by the the default implementations present with Oak.</li>
-<li><a href="authentication/identitymanagement.html">Identity Management</a>: Further information regarding extenal identity management.</li>
+<li><a href="identitymanagement.html">Identity Management</a>: Further information regarding extenal identity management.</li>
-<li><a href="authentication/ldap.html">LDAP Integration</a>: How to make use of the <tt>ExternalLoginModule</tt> with the LDAP identity provider implementation. This combination is aimed to replace <a class="externalLink" href="http://dev.day.com/docs/en/crx/current/administering/ldap_authentication.html">com.day.crx.security.ldap.LDAPLoginModule</a>, which relies on Jackrabbit internals and will no longer work with Oak.</li>
+<li><a href="ldap.html">LDAP Integration</a>: How to make use of the <tt>ExternalLoginModule</tt> with the LDAP identity provider implementation. This combination is aimed to replace <a class="externalLink" href="http://dev.day.com/docs/en/crx/current/administering/ldap_authentication.html">com.day.crx.security.ldap.LDAPLoginModule</a>, which relies on Jackrabbit internals and will no longer work with Oak.</li>
</ul>
<div class="section">
<h5>ExternalLoginModule<a name="ExternalLoginModule"></a></h5>
<p>The [ExternalLoginModule] is a base implementation that allows easy integration of 3rd party authentication and identity systems, such as <a href="ldap.html">LDAP</a>. The general mode of the external login module is to use the external system as authentication source and as a provider for users and groups that may also be synchronized into the repository.</p>
-<p>This login module implementation requires an valid <tt>SyncHandler</tt> and <tt>IdentityProvider</tt> to be present. The detailed behavior of the <tt>ExternalLoginModule</tt> is described in section <a href="authentication/externalloginmodule.html">External Authentication</a>.</p>
+<p>This login module implementation requires an valid <tt>SyncHandler</tt> and <tt>IdentityProvider</tt> to be present. The detailed behavior of the <tt>ExternalLoginModule</tt> is described in section <a href="externalloginmodule.html">External Authentication</a>.</p>
<!-- hidden references --></div></div></div></div>
</div>
</div>
@@ -730,7 +730,7 @@ Session anonymous = repository.login(new
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/differences.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/differences.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authentication : Differences wrt Jackrabbit 2.x</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -611,7 +611,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/defaultusersync.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - User and Group Synchronization : The Default Implementation</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -804,10 +804,10 @@
</tbody>
</table></div>
<div class="section">
-<h4>Configuration of the ExternalPrincipalConfiguration<a name="Configuration_of_the_ExternalPrincipalConfiguration"></a></h4>
-<p>Please note that the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.html">ExternalPrincipalConfiguration</a> comes with a dedicated <tt>RepositoryInitializer</tt>, which requires the repository to be (re)initialized once the module <tt>oak-auth-external</tt> is installed.</p>
+<h4>Configuration of the ‘Apache Jackrabbit Oak External PrincipalConfiguration’<a name="Configuration_of_the_Apache_Jackrabbit_Oak_External_PrincipalConfiguration"></a></h4>
+<p>Please note that the <tt>ExternalPrincipalConfiguration</tt> <i>(“Apache Jackrabbit Oak External PrincipalConfiguration”)</i> comes with a dedicated <tt>RepositoryInitializer</tt>, which requires the repository to be (re)initialized once the module <tt>oak-auth-external</tt> is installed.</p>
<p>The recommended way to assert a proper init, is to add ‘org.apache.jackrabbit.oak.spi.security.authentication.external.impl.principal.ExternalPrincipalConfiguration’ as additional value to the <tt>requiredServicePids</tt> configuration option of the <tt>SecurityProviderRegistration</tt> <i>(“Apache Jackrabbit Oak SecurityProvider”)</i>.</p>
-<p>See section <a href="../introduction.html">Introduction to Oak Security</a> for further details on the <tt>SecurityProviderRegistration</tt>.</p>
+<p>See section <a href="../../introduction.html">Introduction to Oak Security</a> for further details on the <tt>SecurityProviderRegistration</tt>.</p>
<p>The <tt>ExternalPrincipalConfiguration</tt> defines the following configuration options:</p>
<table border="0" class="table table-striped">
@@ -852,7 +852,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/dynamic.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2017-01-13
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20170113" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - User and Group Synchronization : Dynamic Membership</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2017-01-13</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -539,9 +539,9 @@
<ul>
-<li>If enabled the handler will use an alternative <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/SyncContext.html">SyncContext</a> to synchronize external groups (<a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/DynamicSyncContext.html">DynamicSyncContext</a>).</li>
+<li>If enabled the handler will use an alternative <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/SyncContext.html">SyncContext</a> to synchronize external groups (<tt>DynamicSyncContext</tt>).</li>
-<li>Instead of synchronizing groups into the user management, this <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/DynamicSyncContext.html">DynamicSyncContext</a> will additionally set the property <tt>rep:externalPrincipalNames</tt> on the synchronized external user</li>
+<li>Instead of synchronizing groups into the user management, this <tt>DynamicSyncContext</tt> will additionally set the property <tt>rep:externalPrincipalNames</tt> on the synchronized external user</li>
<li><tt>rep:externalPrincipalNames</tt> is a system maintained multivalued property of type ‘STRING’ storing the names of the <tt>java.security.acl.Group</tt>-principals a given external user is member of (both declared and inherited according to the configured membership nesting depth)</li>
@@ -554,7 +554,7 @@
<li>If enabled automatic membership assignment for existing, local groups will not longer be written to the repository</li>
-<li>Instead the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.html">ExternalPrincipalConfiguration</a> will keep track of the mapping between registered <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/SyncHandler.html">SyncHandler</a>s (i.e. auto-membership configuration) and <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/ExternalIdentityProvider.html">ExternalIdentityProvider</a>s. This allows to determine auto-membership based on the <tt>rep:externalId</tt> stored with the user accounts.</li>
+<li>Instead the <tt>ExternalPrincipalConfiguration</tt> <i>(“Apache Jackrabbit Oak External PrincipalConfiguration”)</i> will keep track of the mapping between registered <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/SyncHandler.html">SyncHandler</a>s (i.e. auto-membership configuration) and <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/ExternalIdentityProvider.html">ExternalIdentityProvider</a>s. This allows to determine auto-membership based on the <tt>rep:externalId</tt> stored with the user accounts.</li>
<li>The <tt>PrincipalProvider</tt> associated with this dedicated principal configuration will expand the collection of <tt>Principal</tt>s generated for the following calls with the automatically assigned principals:
@@ -577,8 +577,8 @@
<h4>Effect of Dynamic Membership on other Security Modules<a name="Effect_of_Dynamic_Membership_on_other_Security_Modules"></a></h4>
<div class="section">
<h5>Principal Management<a name="Principal_Management"></a></h5>
-<p>The dynamic (principal) membership features comes with a dedicated <tt>PrincipalConfiguration</tt> implementation (i.e. <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.html">ExternalPrincipalConfiguration</a>) that is in charge of securing<br />the <tt>rep:externalPrincipalNames</tt> properties (see also section <a href="defaultusersync.html#validation">Validation</a> and <a href="defaultusersync.html#configuration">Configuration</a>). </p>
-<p>Additionally the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.html">ExternalPrincipalConfiguration</a> provides a <tt>PrincipalProvider</tt> implementation which makes external (group) principals available to the repository’s authentication and authorization using the <tt>rep:externalPrincipalNames</tt> as a persistent cache to avoid expensive lookup on the IDP. This also makes external <tt>Principal</tt>s retrievable and searchable through the Jackrabbit principal management API (see section <a href="../../principal.html">Principal Management</a> for a comprehensive description).</p>
+<p>The dynamic (principal) membership features comes with a dedicated <tt>PrincipalConfiguration</tt> implementation (i.e. [ExternalPrincipalConfiguration]) that is in charge of securing<br />the <tt>rep:externalPrincipalNames</tt> properties (see also section <a href="defaultusersync.html#validation">Validation</a> and <a href="defaultusersync.html#configuration">Configuration</a>). </p>
+<p>Additionally the [ExternalPrincipalConfiguration] provides a <tt>PrincipalProvider</tt> implementation which makes external (group) principals available to the repository’s authentication and authorization using the <tt>rep:externalPrincipalNames</tt> as a persistent cache to avoid expensive lookup on the IDP. This also makes external <tt>Principal</tt>s retrievable and searchable through the Jackrabbit principal management API (see section <a href="../../principal.html">Principal Management</a> for a comprehensive description).</p>
<p>Please note the following implementation detail wrt accessibility of group principals: A given external principal will be accessible though the principal management API if it can be read from any of the <tt>rep:externalPrincipalNames</tt> properties present using a dedicated query.</p></div>
<div class="section">
<h5>User Management<a name="User_Management"></a></h5>
@@ -587,7 +587,7 @@
<p>While this behavior does not affect default authentication and authorization modules (see below) it will have an impact on applications that rely on full synchronization of external identities. Those application won’t be able to benefit from the dynamic membership feature until dynamic groups can be created with the Jackrabbit <a href="../../user.html">User Management API</a> (see <a class="externalLink" href="https://issues.apache.org/jira/browse/OAK-2687">OAK-2687</a>).</p></div>
<div class="section">
<h5>Authentication<a name="Authentication"></a></h5>
-<p>The authentication setup provided by Oak is not affected by the dynamic membership handling as long as the configured <tt>LoginModule</tt> implementations rely on the <tt>PrincipalProvider</tt> for principal resolution and the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/impl/principal/ExternalPrincipalConfiguration.html">ExternalPrincipalConfiguration</a> is properly registered with the <tt>SecurityProvider</tt> (see section <a href="defaultusersync.html#configuration">Configuration</a>).</p></div>
+<p>The authentication setup provided by Oak is not affected by the dynamic membership handling as long as the configured <tt>LoginModule</tt> implementations rely on the <tt>PrincipalProvider</tt> for principal resolution and the <tt>ExternalPrincipalConfiguration</tt> <i>(“Apache Jackrabbit Oak External PrincipalConfiguration”)</i> is properly registered with the <tt>SecurityProvider</tt> (see section <a href="defaultusersync.html#configuration">Configuration</a>).</p></div>
<div class="section">
<h5>Authorization<a name="Authorization"></a></h5>
<p>The authorization modules shipped with Oak only depend on <tt>Principal</tt>s (and not on user management functionality) and are therefore not affected by the dynamic membership configuration.</p>
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/externallogin_examples.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authentication with External Login Module : Examples</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -794,7 +794,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/external/faq.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/external/faq.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/external/faq.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/external/faq.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2017-01-13
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20170113" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - External Authentication : FAQ</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2017-01-13</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
Modified: jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/externalloginmodule.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authentication with the External Login Module</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -824,7 +824,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/identitymanagement.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - External Identity Management</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -575,7 +575,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/ldap.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/ldap.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/ldap.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/ldap.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - LDAP Integration</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -557,7 +557,7 @@
</ul></div>
<div class="section">
<h4>LDAP Configuration<a name="LDAP_Configuration"></a></h4>
-<p>The LDAP IPDs are configured through the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authentication/ldap/impl/LdapProviderConfig.html">org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapProviderConfig</a> which is populated either via OSGi or during manual <a href="../construct.html">Repository Construction</a>.</p>
+<p>The LDAP IPDs are configured through the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authentication/ldap/impl/LdapProviderConfig.html">org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapProviderConfig</a> which is populated either via OSGi or during manual <a href="../../construct.html">Repository Construction</a>.</p>
<table border="0" class="table table-striped">
<thead>
@@ -775,7 +775,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/preauthentication.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Pre-Authenticated Login</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -636,7 +636,7 @@ try {
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/token/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/token/default.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/token/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/token/default.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Token Management : The Default Implementation</title>
<link rel="stylesheet" href="../../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -884,7 +884,7 @@ final class MyCredentialsSupport impleme
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/tokenmanagement.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-08-11
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160811" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Token Authentication and Token Management</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-08-11</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -582,7 +582,7 @@
<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/token/CompositeTokenProvider.html">CompositeTokenProvider</a>: Aggregation of the <tt>TokenProvider</tt> implementations defined by the configurations contained the <tt>CompositeTokenConfiguration</tt></li>
</ul>
<p>See section <a href="#pluggability">Pluggability</a> for an example.</p>
-<p><a href="default_implementation"></a></p></div>
+<p><a name="default_implementation"></a></p></div>
<div class="section">
<h3>Characteristics of the Default Implementation<a name="Characteristics_of_the_Default_Implementation"></a></h3>
<p>The characteristics of the default token management implementation is described in section <a href="token/default.html">Token Management : The Default Implementation</a>. </p>
@@ -652,7 +652,7 @@ public class MyTokenConfiguration extend
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authentication/usersync.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authentication/usersync.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authentication/usersync.html (original)
+++ jackrabbit/site/live/oak/docs/security/authentication/usersync.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - User and Group Synchronization</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -540,7 +540,7 @@
</ul>
<div class="section">
<h4>JMX Synchronization Tool<a name="JMX_Synchronization_Tool"></a></h4>
-<p>In addition to the synchronization API Oak 1.0 defines utilities to manage synchronized external identities within JMX (<a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/external/jmx/SynchronizationMBean.html">SynchronizationMBean</a>) which allows for the following tasks:</p>
+<p>In addition to the synchronization API Oak 1.0 defines utilities to manage synchronized external identities within JMX (<tt>SynchronizationMBean</tt>) which allows for the following tasks:</p>
<ul>
@@ -594,7 +594,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authorization.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Authorization</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -601,7 +601,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authorization/composite.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/composite.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/composite.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/composite.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Combining Multiple Authorization Models</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -521,7 +521,7 @@
<div class="section">
<h3>General Notes<a name="General_Notes"></a></h3>
<p>Since Oak 1.4 it is possible to combine multiple authorization models within the default security setup.</p>
-<p>The main entry point for the aggregation of multiple authorization models is the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authorization/composite/CompositeAuthorizationConfiguration.html">CompositeAuthorizationConfiguration</a>, which is in charge of generating composite variants of the <tt>AccessControlManager</tt>, <tt>PermissionProvider</tt> and <tt>RestrictionProvider</tt> if multiple authorization modules have been configured (see section <a href="#details">Implementation Details</a> below.</p>
+<p>The main entry point for the aggregation of multiple authorization models is the <a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/composite/CompositeAuthorizationConfiguration.java">CompositeAuthorizationConfiguration</a>, which is in charge of generating composite variants of the <tt>AccessControlManager</tt>, <tt>PermissionProvider</tt> and <tt>RestrictionProvider</tt> if multiple authorization modules have been configured (see section <a href="#details">Implementation Details</a> below.</p>
<p><i>Please note:</i> Despite the fact that Oak supports the aggregation of multiple authorization models, this extension is only recommended for experts that have in-depth knowledge and understanding of Jackrabbit/Oak authorization concepts. Doing so might otherwise result in severe security issues and heavily impact overall performance.</p>
<p><a name="api_extensions"></a></p></div>
<div class="section">
@@ -550,7 +550,7 @@
<p>Note: as long as a single authorization model is configured (default setup) the <tt>CompositeAuthorizationConfiguration</tt> will omit any extra wrapping.</p>
<div class="section">
<h4>Access Control<a name="Access_Control"></a></h4>
-<p>Once multiple modules are deployed a <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authorization/composite/CompositeAccessControlManager.html">CompositeAccessControlManager</a> with the following characteristics will be returned:</p>
+<p>Once multiple modules are deployed a <a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/composite/CompositeAccessControlManager.java">CompositeAccessControlManager</a> with the following characteristics will be returned:</p>
<ul>
@@ -564,7 +564,7 @@
<p>If a given model allows for writing access control policies, the access control manager implementation must additionally implement the <tt>PolicyOwner</tt> interface as explained in section <a href="#api_extensions">API Extensions</a> above.</p></div>
<div class="section">
<h4>Permission Evaluation<a name="Permission_Evaluation"></a></h4>
-<p>Only models implementing the <tt>AggregatedPermissionProvider</tt> extensions will be respected for aggregation into the <a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/security/authorization/composite/CompositePermissionProvider.html">CompositePermissionProvider</a>. This allows individual models to cover only a subset of permissions and|or a subset of paths within the repository.</p>
+<p>Only models implementing the <tt>AggregatedPermissionProvider</tt> extensions will be respected for aggregation into the <a class="externalLink" href="http://svn.apache.org/repos/asf/jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/composite/CompositePermissionProvider.java">CompositePermissionProvider</a>. This allows individual models to cover only a subset of permissions and|or a subset of paths within the repository.</p>
<p>The composite wrapper subsequently applies the following logic to evaluate the effective permissions:</p>
<ul>
@@ -619,7 +619,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/authorization/cug.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/cug.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/cug.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/cug.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2017-01-13
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20170113" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Managing Access with Closed User Groups (CUG)</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2017-01-13</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -606,7 +606,7 @@
<li>the <tt>Subject</tt> contains at least one <tt>Principal</tt> explicitly excluded from CUG evaluation in the configured, global <tt>CugExclude</tt></li>
</ul>
-<p>This further implies that the <tt>PermissionProvider</tt> will only evaluate regular read permissions (i.e. <tt>READ_NODE</tt> and <tt>READ_PROPERTY</tt>). Evaluation of any other <a href="../permissions.html#oak_permissions">permissions</a> including reading the cug policy node (access control content) is consequently delegated to other authorization modules. In case there was no module dealing with these permissions, access will be denied (see in section <i>Combining Multiple Authorization Models</i> for <a href="composite.html#details">details</a>). </p></div></div>
+<p>This further implies that the <tt>PermissionProvider</tt> will only evaluate regular read permissions (i.e. <tt>READ_NODE</tt> and <tt>READ_PROPERTY</tt>). Evaluation of any other <a href="../permission.html#oak_permissions">permissions</a> including reading the cug policy node (access control content) is consequently delegated to other authorization modules. In case there was no module dealing with these permissions, access will be denied (see in section <i>Combining Multiple Authorization Models</i> for <a href="composite.html#details">details</a>). </p></div></div>
<div class="section">
<h3>Representation in the Repository<a name="Representation_in_the_Repository"></a></h3>
<p>CUG policies defined by this module in a dedicate node name <tt>rep:cugPolicy</tt> of type <tt>rep:CugPolicy</tt>. This node is defined by a dedicate mixin type <tt>rep:CugMixin</tt> (similar to <tt>rep:AccessControllable</tt>) and has a single mandatory, protected property which stores the name of principals that are granted read access in the restricted area:</p>
Modified: jackrabbit/site/live/oak/docs/security/authorization/restriction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/authorization/restriction.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/authorization/restriction.html (original)
+++ jackrabbit/site/live/oak/docs/security/authorization/restriction.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Restriction Management</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -592,7 +592,7 @@
<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/restriction/RestrictionPattern.html">RestrictionPattern</a>: the processed restriction ready for permission evaluation</li>
</ul>
-<p><a href="default_implementation"></a></p></div>
+<p><a name="default_implementation"></a></p></div>
<div class="section">
<h3>Default Implementation<a name="Default_Implementation"></a></h3>
<p>Oak 1.0 provides the following base implementations:</p>
@@ -911,7 +911,7 @@ Repository repo = new Jcr(new Oak()).wit
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/introduction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/introduction.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/introduction.html (original)
+++ jackrabbit/site/live/oak/docs/security/introduction.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Introduction to Oak Security</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -824,7 +824,7 @@ Repository repository = new Jcr().with(s
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/overview.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/overview.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/overview.html (original)
+++ jackrabbit/site/live/oak/docs/security/overview.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-22
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161122" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - The Oak Security Layer</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-22</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -676,7 +676,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/permission.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2017-01-13
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20170113" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permissions</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2017-01-13</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -518,7 +518,7 @@
See the License for the specific language governing permissions and
limitations under the License. --><div class="section">
<h2>Permissions<a name="Permissions"></a></h2>
-<p><a href="jcr_api"></a></p>
+<p><a name="jcr_api"></a></p>
<div class="section">
<h3>JCR and Jackrabbit API<a name="JCR_and_Jackrabbit_API"></a></h3>
<p>While access control management is a optional feature, a JCR implementation is required to support the basic permission checking. The basic requirements for the permission evalution are defines as follows</p>
@@ -608,7 +608,7 @@ if (session.hasPermission("/content
session.save();
}
</pre></div>
-<p><a href="oak_permissions"></a></p></div></div></div></div>
+<p><a name="oak_permissions"></a></p></div></div></div></div>
<div class="section">
<h3>Oak Permissions<a name="Oak_Permissions"></a></h3>
<div class="section">
@@ -887,7 +887,7 @@ if (session.hasPermission("/content
<li><a href="/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authorization/permission/PermissionConstants.html">PermissionConstants</a>: Constants used throughout the permission evaluation.</li>
</ul>
-<p><a href="default_implementation"></a></p></div>
+<p><a name="default_implementation"></a></p></div>
<div class="section">
<h3>Characteristics of the Permission Evaluation<a name="Characteristics_of_the_Permission_Evaluation"></a></h3>
<p>As explained above permission evaluation is completely separated from the access control management and the associated ccontent. The evaluation itself is done by the configured <tt>PermissionProvider</tt>.</p>
Modified: jackrabbit/site/live/oak/docs/security/permission/default.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/default.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/default.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/default.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-18
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161118" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permissions : The Default Implementation</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-18</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -521,7 +521,7 @@
<div class="section">
<h3>General Notes<a name="General_Notes"></a></h3>
<p>The default implementation of the <tt>PermissionProvider</tt> interface evaluates permissions based on the information stored in a dedicated part of the repository content call the <a href="#permissionStore">permission store</a>.</p>
-<p><a href="default_implementation"></a></p></div>
+<p><a name="default_implementation"></a></p></div>
<div class="section">
<h3>Characteristics of the Permission Evaluation<a name="Characteristics_of_the_Permission_Evaluation"></a></h3>
<div class="section">
@@ -750,7 +750,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/permission/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/differences.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/differences.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permissions : Differences wrt Jackrabbit 2.x</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -581,7 +581,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/permission/evaluation.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/evaluation.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/evaluation.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/evaluation.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-08-11
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160811" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permission Evaluation in Detail</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-08-11</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -883,7 +883,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html (original)
+++ jackrabbit/site/live/oak/docs/security/permission/permissionsandprivileges.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-11-22
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20161122" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Permissions vs Privileges</title>
<link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-11-22</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -620,7 +620,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.
Modified: jackrabbit/site/live/oak/docs/security/principal.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/principal.html?rev=1779196&r1=1779195&r2=1779196&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/principal.html (original)
+++ jackrabbit/site/live/oak/docs/security/principal.html Tue Jan 17 13:53:09 2017
@@ -1,13 +1,13 @@
<!DOCTYPE html>
<!--
- | Generated by Apache Maven Doxia at 2016-07-20
+ | Generated by Apache Maven Doxia at 2017-01-17
| Rendered using Apache Maven Fluido Skin 1.3.0
-->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20160720" />
+ <meta name="Date-Revision-yyyymmdd" content="20170117" />
<meta http-equiv="Content-Language" content="en" />
<title>Jackrabbit Oak - Principal Management</title>
<link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -216,7 +216,7 @@
<ul class="breadcrumb">
- <li id="publishDate">Last Published: 2016-07-20</li>
+ <li id="publishDate">Last Published: 2017-01-17</li>
<li class="divider">|</li> <li id="projectVersion">Version: 1.6-SNAPSHOT</li>
@@ -678,7 +678,7 @@
<footer>
<div class="container-fluid">
- <div class="row span12">Copyright © 2012-2016
+ <div class="row span12">Copyright © 2012-2017
<a href="http://www.apache.org/">The Apache Software Foundation</a>.
All Rights Reserved.