jackrabbit-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ang...@apache.org
Subject svn commit: r1563877 - /jackrabbit/site/live/oak/docs/differences_permission.html
Date Mon, 03 Feb 2014 13:16:53 GMT
Author: angela
Date: Mon Feb  3 13:16:52 2014
New Revision: 1563877

URL: http://svn.apache.org/r1563877
OAK-936: Site checkin for project Oak Documentation-0.16-SNAPSHOT


Modified: jackrabbit/site/live/oak/docs/differences_permission.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/differences_permission.html?rev=1563877&r1=1563876&r2=1563877&view=diff
--- jackrabbit/site/live/oak/docs/differences_permission.html (original)
+++ jackrabbit/site/live/oak/docs/differences_permission.html Mon Feb  3 13:16:52 2014
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
- | Generated by Apache Maven Doxia at 2014-01-30
+ | Generated by Apache Maven Doxia at 2014-02-03
  | Rendered using Apache Maven Fluido Skin 1.3.0
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20140130" />
+    <meta name="Date-Revision-yyyymmdd" content="20140203" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Permission Evaluation : Differences wrt Jackrabbit 2.x</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -154,7 +154,7 @@
         <ul class="breadcrumb">
-                  <li id="publishDate">Last Published: 2014-01-30</li>
+                  <li id="publishDate">Last Published: 2014-02-03</li>
                   <li class="divider">|</li> <li id="projectVersion">Version:
@@ -406,7 +406,16 @@
 <p>Due to the nature of the diff mechanism in Oak it is not possible to distinguish
between <tt>JackrabbitNode#rename</tt> and a move with subsequent reordering.
Consequently the permission evaluation will no longer apply the special handling for the renaming
as it was present in Jackrabbit 2.x (renaming just required the ability to modify the child
collection of the parent node).</p></div>
 <div class="section">
 <h5>Move<a name="Move"></a></h5>
-<p><i>TODO: permission evaluation with move is not yet implemented <a class="externalLink"
+<p>Due to the nature of the diff mechanism in Oak it is no longer possible to treat
move operations the same way as it was implemented in Jackrabbit 2.x. The current permission
evaluation attempts to provide a best-effort handling to achieve a similar behavior that it
was present in Jackrabbit 2.x.</p>
+<p>The current implementation has the following limitations with respect to multiple
move operations within a given set of transient operations:</p>
+<li>Move operations that replace an node that has been moved away will not be detected
as modification by the diff mechanism and regular permission checks for on the subtree will
be performed.</li>
+<li>Moving an ancestor of a node that has been moved will only detect the second move
and will enforce regular permissions checks on the child that has been moved in a first step.</li>
+<p>For API consumers and applications running on Jackrabbit Oak this means that combinations
of multiple moves can not always be properly resolved. Consequently permissions will be evaluated
as if the modifications did not include move (in general being more restrictive): If the move
leads to changes that are detected by the diff mechanism, regular permissions will be evaluated
for all items that appear to be added, removed or modified, while a regular move operations
just requires <tt>REMOVE_NODE</tt> permission on the source, <tt>ADD_NODE</tt>
and <tt>NODE_TYPE_MANAGEMENT</tt> permissions at the destination.</p></div>
 <div class="section">
 <h5>Copy<a name="Copy"></a></h5>
 <p><i>TODO: permission evaluation with copy is not yet implemented <a class="externalLink"

View raw message