You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Konrad Windszus (Jira)" <ji...@apache.org> on 2023/01/23 18:35:00 UTC

[jira] [Comment Edited] (SLING-10281) Revert SLING-9449: set principal ACL should throw an Exception it it fails

    [ https://issues.apache.org/jira/browse/SLING-10281?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17656510#comment-17656510 ] 

Konrad Windszus edited comment on SLING-10281 at 1/23/23 6:34 PM:
------------------------------------------------------------------

New instruction supported by Parser with https://github.com/apache/sling-org-apache-sling-repoinit-parser/commit/e09013b0434d6088cbb8b189337ae6b322aa7722 and supported through jcr-repoinit in https://github.com/apache/sling-org-apache-sling-jcr-repoinit/commit/63e0d135e7220165f5a761930309c60406474718.


was (Author: kwin):
New instruction added with https://github.com/apache/sling-org-apache-sling-repoinit-parser/commit/e09013b0434d6088cbb8b189337ae6b322aa7722.

> Revert SLING-9449: set principal ACL should throw an Exception it it fails
> --------------------------------------------------------------------------
>
>                 Key: SLING-10281
>                 URL: https://issues.apache.org/jira/browse/SLING-10281
>             Project: Sling
>          Issue Type: Bug
>          Components: Repoinit
>    Affects Versions: Repoinit JCR 1.1.34
>            Reporter: Konrad Windszus
>            Assignee: Konrad Windszus
>            Priority: Major
>             Fix For: Repoinit Parser 1.8.2, Repoinit JCR 1.1.44
>
>          Time Spent: 10.5h
>  Remaining Estimate: 0h
>
> As highlighted in the last comment of SLING-9449, repoinit should use exceptions when some statements cannot be applied (as that leads to an undesired repository state). In the worst case it could lead to privilege escalation



--
This message was sent by Atlassian Jira
(v8.20.10#820010)