jackrabbit-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From tomm...@apache.org
Subject svn commit: r1686825 [2/2] - in /jackrabbit/site/live/oak/docs: ./ architecture/ coldstandby/ nodestore/ oak-mongo-js/ oak_api/ plugins/ query/ security/ security/accesscontrol/ security/authentication/ security/permission/ security/principal/ security...
Date Mon, 22 Jun 2015 10:12:09 GMT
Added: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html?rev=1686825&view=auto
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html (added)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html Mon Jun 22 10:12:08 2015
@@ -0,0 +1,789 @@
+<!DOCTYPE html>
+<!--
+ | Generated by Apache Maven Doxia at 2015-06-22
+ | Rendered using Apache Maven Fluido Skin 1.3.0
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
+    <meta http-equiv="Content-Language" content="en" />
+    <title>Jackrabbit Oak - Privilege Management : Mapping Privileges to Items</title>
+    <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
+    <link rel="stylesheet" href="../../css/site.css" />
+    <link rel="stylesheet" href="../../css/print.css" media="print" />
+
+      
+    <script type="text/javascript" src="../../js/apache-maven-fluido-1.3.0.min.js"></script>
+
+    
+            </head>
+        <body class="topBarEnabled">
+          
+    
+    
+            
+    
+    
+    <a href="http://github.com/apache/jackrabbit-oak">
+      <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
+        src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
+        alt="Fork me on GitHub">
+    </a>
+  
+                
+                    
+                
+
+    <div id="topbar" class="navbar navbar-fixed-top ">
+      <div class="navbar-inner">
+                <div class="container-fluid">
+        <a data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar">
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+        </a>
+                
+                                                                                <a class="brand" href="../../"  title="Oak logo">
+
+                                
+                                                                                                                    <img src="../../oak_logo.png" alt="Oak logo" />
+                
+                </a>
+                    
+                                <ul class="nav">
+                          <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Overview <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../index.html"  title="Jackrabbit Oak">Jackrabbit Oak</a>
+</li>
+                  
+                      <li>      <a href="../../license.html"  title="License">License</a>
+</li>
+                  
+                      <li>      <a href="../../downloads.html"  title="Downloads">Downloads</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Concepts and Architecture <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../architecture/overview.html"  title="Overview">Overview</a>
+</li>
+                  
+                      <li>      <a href="../../architecture/nodestate.html"  title="The Node State Model">The Node State Model</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="http://www.day.com/specs/jcr/2.0/index.html"  title="JCR API">JCR API</a>
+</li>
+                  
+                      <li>      <a href="../../oak_api/overview.html"  title="Oak API">Oak API</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Features and Plugins <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../nodestore/overview.html"  title="Node Storage">Node Storage</a>
+</li>
+                  
+                      <li>      <a href="../../plugins/blobstore.html"  title="Blob Storage">Blob Storage</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/documentmk.html"  title="DocumentNodeStore">DocumentNodeStore</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/segmentmk.html"  title="SegmentNodeStore">SegmentNodeStore</a>
+</li>
+                  
+                      <li>      <a href="../../query/query.html"  title="Query">Query</a>
+</li>
+                  
+                      <li>      <a href="../../query/lucene.html"  title="Index - Lucene">Index - Lucene</a>
+</li>
+                  
+                      <li>      <a href="../../query/solr.html"  title="Index - Solr">Index - Solr</a>
+</li>
+                  
+                      <li>      <a href="../../security/overview.html"  title="Security">Security</a>
+</li>
+                  
+                      <li>      <a href="../../clustering.html"  title="Clustering">Clustering</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/persistent-cache.html"  title="Persistent Cache">Persistent Cache</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Using Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../use_getting_started.html"  title="Getting Started">Getting Started</a>
+</li>
+                  
+                      <li>      <a href="../../construct.html"  title="Repository Construction">Repository Construction</a>
+</li>
+                  
+                      <li>      <a href="../../osgi_config.html"  title="Configuring Oak">Configuring Oak</a>
+</li>
+                  
+                      <li>      <a href="../../command_line.html"  title="Command Line Tools">Command Line Tools</a>
+</li>
+                  
+                      <li>      <a href="../../differences.html"  title="Differences to Jackrabbit 2">Differences to Jackrabbit 2</a>
+</li>
+                  
+                      <li>      <a href="../../known_issues.html"  title="Known Issues">Known Issues</a>
+</li>
+                  
+                      <li>      <a href="../../dos_and_donts.html"  title="Dos and Don'ts">Dos and Don'ts</a>
+</li>
+                  
+                      <li>      <a href="../../coldstandby/coldstandby.html"  title="Cold Standby">Cold Standby</a>
+</li>
+                  
+                      <li>      <a href="../../FAQ.html"  title="FAQ">FAQ</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Developing Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../dev_getting_started.html"  title="Getting Started">Getting Started</a>
+</li>
+                  
+                      <li>      <a href="../../participating.html"  title="Participating">Participating</a>
+</li>
+                  
+                      <li>      <a href="../../apidocs/index.html"  title="API Docs">API Docs</a>
+</li>
+                  
+                      <li>      <a href="../../attribution.html"  title="Attribution">Attribution</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Links <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="http://jackrabbit.apache.org/oak"  title="Apache Jackrabbit Oak">Apache Jackrabbit Oak</a>
+</li>
+                  
+                      <li>      <a href="http://jackrabbit.apache.org/"  title="Apache Jackrabbit">Apache Jackrabbit</a>
+</li>
+                          </ul>
+      </li>
+                  </ul>
+          
+          
+          
+                   
+                      </div>
+          
+        </div>
+      </div>
+    </div>
+    
+        <div class="container-fluid">
+          <div id="banner">
+        <div class="pull-left">
+                                <div id="bannerLeft">
+                <h2>Oak Documentation</h2>
+                </div>
+                      </div>
+        <div class="pull-right">  </div>
+        <div class="clear"><hr/></div>
+      </div>
+
+      <div id="breadcrumbs">
+        <ul class="breadcrumb">
+                
+                    
+                  <li id="publishDate">Last Published: 2015-06-22</li>
+                  <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
+                      
+                
+                    
+      
+                            </ul>
+      </div>
+
+            
+      <div class="row-fluid">
+        <div id="leftColumn" class="span3">
+          <div class="well sidebar-nav">
+                
+                    
+                <ul class="nav nav-list">
+                    <li class="nav-header">Overview</li>
+                                
+      <li>
+    
+                          <a href="../../index.html" title="Jackrabbit Oak">
+          <i class="none"></i>
+        Jackrabbit Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../license.html" title="License">
+          <i class="none"></i>
+        License</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../downloads.html" title="Downloads">
+          <i class="none"></i>
+        Downloads</a>
+            </li>
+                              <li class="nav-header">Concepts and Architecture</li>
+                                
+      <li>
+    
+                          <a href="../../architecture/overview.html" title="Overview">
+          <i class="none"></i>
+        Overview</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../architecture/nodestate.html" title="The Node State Model">
+          <i class="none"></i>
+        The Node State Model</a>
+            </li>
+                              <li class="nav-header">Main APIs</li>
+                                
+      <li>
+    
+                          <a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API">
+          <i class="none"></i>
+        JCR API</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../oak_api/overview.html" title="Oak API">
+          <i class="none"></i>
+        Oak API</a>
+            </li>
+                              <li class="nav-header">Features and Plugins</li>
+                                
+      <li>
+    
+                          <a href="../../nodestore/overview.html" title="Node Storage">
+          <i class="none"></i>
+        Node Storage</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../plugins/blobstore.html" title="Blob Storage">
+          <i class="none"></i>
+        Blob Storage</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">
+          <i class="none"></i>
+        DocumentNodeStore</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">
+          <i class="none"></i>
+        SegmentNodeStore</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/query.html" title="Query">
+          <i class="none"></i>
+        Query</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/lucene.html" title="Index - Lucene">
+          <i class="none"></i>
+        Index - Lucene</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/solr.html" title="Index - Solr">
+          <i class="none"></i>
+        Index - Solr</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../security/overview.html" title="Security">
+          <i class="none"></i>
+        Security</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../clustering.html" title="Clustering">
+          <i class="none"></i>
+        Clustering</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">
+          <i class="none"></i>
+        Persistent Cache</a>
+            </li>
+                              <li class="nav-header">Using Oak</li>
+                                
+      <li>
+    
+                          <a href="../../use_getting_started.html" title="Getting Started">
+          <i class="none"></i>
+        Getting Started</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../construct.html" title="Repository Construction">
+          <i class="none"></i>
+        Repository Construction</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../osgi_config.html" title="Configuring Oak">
+          <i class="none"></i>
+        Configuring Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../command_line.html" title="Command Line Tools">
+          <i class="none"></i>
+        Command Line Tools</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../differences.html" title="Differences to Jackrabbit 2">
+          <i class="none"></i>
+        Differences to Jackrabbit 2</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../known_issues.html" title="Known Issues">
+          <i class="none"></i>
+        Known Issues</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../dos_and_donts.html" title="Dos and Don'ts">
+          <i class="none"></i>
+        Dos and Don'ts</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../coldstandby/coldstandby.html" title="Cold Standby">
+          <i class="none"></i>
+        Cold Standby</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../FAQ.html" title="FAQ">
+          <i class="none"></i>
+        FAQ</a>
+            </li>
+                              <li class="nav-header">Developing Oak</li>
+                                
+      <li>
+    
+                          <a href="../../dev_getting_started.html" title="Getting Started">
+          <i class="none"></i>
+        Getting Started</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../participating.html" title="Participating">
+          <i class="none"></i>
+        Participating</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../apidocs/index.html" title="API Docs">
+          <i class="none"></i>
+        API Docs</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../attribution.html" title="Attribution">
+          <i class="none"></i>
+        Attribution</a>
+            </li>
+                              <li class="nav-header">Links</li>
+                                
+      <li>
+    
+                          <a href="http://jackrabbit.apache.org/oak" class="externalLink" title="Apache Jackrabbit Oak">
+          <i class="none"></i>
+        Apache Jackrabbit Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="http://jackrabbit.apache.org/" class="externalLink" title="Apache Jackrabbit">
+          <i class="none"></i>
+        Apache Jackrabbit</a>
+            </li>
+            </ul>
+                
+                    
+                
+          <hr class="divider" />
+
+           <div id="poweredBy">
+                   
+    <script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>
+
+    
+    <div class="g-plusone" data-href="http://jackrabbit.apache.org/oak/docs/" data-size="tall" ></div>
+
+                   <div class="clear"></div>
+                            <div class="clear"></div>
+                            <div class="clear"></div>
+                             <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+        <img class="builtBy" alt="Built by Maven" src="../../images/logos/maven-feather.png" />
+      </a>
+                  </div>
+          </div>
+        </div>
+        
+                
+        <div id="bodyColumn"  class="span9" >
+                                  
+            <!-- Licensed to the Apache Software Foundation (ASF) under one or more
+   contributor license agreements.  See the NOTICE file distributed with
+   this work for additional information regarding copyright ownership.
+   The ASF licenses this file to You under the Apache License, Version 2.0
+   (the "License"); you may not use this file except in compliance with
+   the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License. --><div class="section">
+<div class="section">
+<h3>Privilege Management : Mapping Privileges to Items<a name="Privilege_Management_:_Mapping_Privileges_to_Items"></a></h3>
+<p>The following table allows to identify which items will be affected by the invididual built in privileges.</p>
+<p>Note: the term <i>regular</i> is used on contrast to <i>protected</i> items that are written using special API calls and thus mandate special privileges or are maintained by the system only and cannot be modified by the API consumer.</p>
+<div class="section">
+<h4>Read<a name="Read"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>rep:readNodes </td>
+      
+<td>all nodes except for access control content </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>rep:readProperties </td>
+      
+<td>all properties except for access control content </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>jcr:readAccessControl </td>
+      
+<td>all items defining access control content (see below) </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Properties<a name="Writing_Properties"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>rep:addProperties </td>
+      
+<td>creation of new regular properties </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>rep:alterProperties </td>
+      
+<td>changing existing regular properties </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>rep:removeProperties </td>
+      
+<td>removing existing regular properties </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Nodes<a name="Writing_Nodes"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>jcr:addChildNodes </td>
+      
+<td>granted on parent to create new regular child nodes </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:removeChildNodes </td>
+      
+<td>granted on parent to remove regular child nodes </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>rep:removeNode </td>
+      
+<td>required to be granted on regular nodes for removal </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:nodeTypeManagement</td>
+      
+<td>explicitly setting or modifying node type information on a regular (non-protected) node; affected properties are <tt>jcr:primaryType</tt>, <tt>jcr:mixinTypes</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Access Control Management<a name="Access_Control_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>jcr:readAccessControl </td>
+      
+<td>all items defining access control content (1) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:modifyAccessControl </td>
+      
+<td>all items defining access control content (1) </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>rep:privilegeManagement </td>
+      
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:privileges</tt> </td>
+    </tr>
+  </tbody>
+</table>
+<p>(1) in Oak reading/writing nodes with the following node types: <tt>rep:Policy</tt>, <tt>rep:ACL</tt>, <tt>rep:ACE</tt>, <tt>rep:GrantACE</tt>, <tt>rep:DenyACE</tt>, <tt>rep:Restrictions</tt>, <tt>rep:CugPolicy</tt> and all protected items defined therein</p></div>
+<div class="section">
+<h4>Other Session and Workspace Operations<a name="Other_Session_and_Workspace_Operations"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>jcr:versionManagement </td>
+      
+<td>all items defining version content (2) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:lockManagement </td>
+      
+<td>Properties <tt>jcr:lockIsDeep</tt>, <tt>jcr:lockOwner</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>jcr:lifecycleManagement </td>
+      
+<td><tt>jcr:lifecyclePolicy</tt>, <tt>jcr:currentLifecycleState</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:retentionManagement </td>
+      
+<td>implementation specific, in Jackrabbit 2.x the following properties: <tt>rep:hold</tt>, <tt>rep:retentionPolicy</tt>, Oak: NA </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>rep:userManagement </td>
+      
+<td>all items defining user/group content (3) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>rep:indexDefinitionManagement </td>
+      
+<td>implementation specific; in Oak trees starting with an <tt>oak:index</tt> node </td>
+    </tr>
+  </tbody>
+</table>
+<p>(2) granting jcr:versionManagement privilege at a given versionable node will allow writing items through JCR version management API which writes below <tt>/jcr:system/jcr:versionStorage</tt>, <tt>/jcr:system/jcr:activities</tt>, <tt>/jcr:system/jcr:configurations</tt> and the following properties both in the storage(s) and with the versionable node: <tt>jcr:activity</tt>, <tt>jcr:activityTitle</tt>, <tt>jcr:baseVersion</tt>, <tt>jcr:childVersionHistory</tt>, <tt>jcr:configuration</tt>, <tt>jcr:copiedFrom</tt>, <tt>jcr:frozenMixinTypes</tt>, <tt>jcr:frozenPrimaryType</tt>, <tt>jcr:frozenUuid</tt>, <tt>jcr:isCheckedOut</tt>, <tt>jcr:mergeFailed</tt>, <tt>jcr:predecessors</tt>,<tt>jcr:successors</tt>,<tt>jcr:root</tt>,<tt>jcr:versionableUuid</tt>, <tt>jcr:versionHistory</tt> (3) in Oak creating nodes with the following primary types: <tt>rep:User</tt>, <tt>rep:SystemUser</tt>, <tt>rep:Group</tt>, <tt>rep:Impersonatable</tt>, <tt>rep:Members</tt>, <tt>rep:MemberReferences</tt>, <tt>
 rep:MemberReferencesList</tt>, <tt>rep:Password</tt> and all protected properties defined therein</p></div>
+<div class="section">
+<h4>Repository Operations<a name="Repository_Operations"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>Privilege </th>
+      
+<th>Affected Items </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td>jcr:namespaceManagement </td>
+      
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:namespaces</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:nodeTypeDefinitionManagement </td>
+      
+<td>implementation specific; in Oak everything below <tt>/jcr:system/jcr:nodeTypes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td>rep:privilegeManagement </td>
+      
+<td>implementation specific; in Oak everything below <tt>/jcr:system/rep:privileges</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td>jcr:workspaceManagement </td>
+      
+<td>NA </td>
+    </tr>
+  </tbody>
+</table></div></div></div>
+                  </div>
+            </div>
+          </div>
+
+    <hr/>
+
+    <footer>
+            <div class="container-fluid">
+              <div class="row span12">Copyright &copy;                    2012-2015
+                        <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+            All Rights Reserved.      
+                    
+      </div>
+
+        
+        
+          
+    
+    
+                
+    <div id="ohloh" class="pull-right">
+      <script type="text/javascript" src="http://www.ohloh.net/p/jackrabbit-oak/widgets/project_thin_badge.js"></script>
+    </div>
+        </div>
+    </footer>
+  </body>
+</html>
\ No newline at end of file

Propchange: jackrabbit/site/live/oak/docs/security/privilege/mappingtoitems.html
------------------------------------------------------------------------------
    svn:eol-style = native

Added: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html?rev=1686825&view=auto
==============================================================================
--- jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html (added)
+++ jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html Mon Jun 22 10:12:08 2015
@@ -0,0 +1,1771 @@
+<!DOCTYPE html>
+<!--
+ | Generated by Apache Maven Doxia at 2015-06-22
+ | Rendered using Apache Maven Fluido Skin 1.3.0
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
+    <meta http-equiv="Content-Language" content="en" />
+    <title>Jackrabbit Oak - Privilege Management : Mapping API Calls to Privileges</title>
+    <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
+    <link rel="stylesheet" href="../../css/site.css" />
+    <link rel="stylesheet" href="../../css/print.css" media="print" />
+
+      
+    <script type="text/javascript" src="../../js/apache-maven-fluido-1.3.0.min.js"></script>
+
+    
+            </head>
+        <body class="topBarEnabled">
+          
+    
+    
+            
+    
+    
+    <a href="http://github.com/apache/jackrabbit-oak">
+      <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
+        src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
+        alt="Fork me on GitHub">
+    </a>
+  
+                
+                    
+                
+
+    <div id="topbar" class="navbar navbar-fixed-top ">
+      <div class="navbar-inner">
+                <div class="container-fluid">
+        <a data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar">
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+          <span class="icon-bar"></span>
+        </a>
+                
+                                                                                <a class="brand" href="../../"  title="Oak logo">
+
+                                
+                                                                                                                    <img src="../../oak_logo.png" alt="Oak logo" />
+                
+                </a>
+                    
+                                <ul class="nav">
+                          <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Overview <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../index.html"  title="Jackrabbit Oak">Jackrabbit Oak</a>
+</li>
+                  
+                      <li>      <a href="../../license.html"  title="License">License</a>
+</li>
+                  
+                      <li>      <a href="../../downloads.html"  title="Downloads">Downloads</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Concepts and Architecture <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../architecture/overview.html"  title="Overview">Overview</a>
+</li>
+                  
+                      <li>      <a href="../../architecture/nodestate.html"  title="The Node State Model">The Node State Model</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Main APIs <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="http://www.day.com/specs/jcr/2.0/index.html"  title="JCR API">JCR API</a>
+</li>
+                  
+                      <li>      <a href="../../oak_api/overview.html"  title="Oak API">Oak API</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Features and Plugins <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../nodestore/overview.html"  title="Node Storage">Node Storage</a>
+</li>
+                  
+                      <li>      <a href="../../plugins/blobstore.html"  title="Blob Storage">Blob Storage</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/documentmk.html"  title="DocumentNodeStore">DocumentNodeStore</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/segmentmk.html"  title="SegmentNodeStore">SegmentNodeStore</a>
+</li>
+                  
+                      <li>      <a href="../../query/query.html"  title="Query">Query</a>
+</li>
+                  
+                      <li>      <a href="../../query/lucene.html"  title="Index - Lucene">Index - Lucene</a>
+</li>
+                  
+                      <li>      <a href="../../query/solr.html"  title="Index - Solr">Index - Solr</a>
+</li>
+                  
+                      <li>      <a href="../../security/overview.html"  title="Security">Security</a>
+</li>
+                  
+                      <li>      <a href="../../clustering.html"  title="Clustering">Clustering</a>
+</li>
+                  
+                      <li>      <a href="../../nodestore/persistent-cache.html"  title="Persistent Cache">Persistent Cache</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Using Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../use_getting_started.html"  title="Getting Started">Getting Started</a>
+</li>
+                  
+                      <li>      <a href="../../construct.html"  title="Repository Construction">Repository Construction</a>
+</li>
+                  
+                      <li>      <a href="../../osgi_config.html"  title="Configuring Oak">Configuring Oak</a>
+</li>
+                  
+                      <li>      <a href="../../command_line.html"  title="Command Line Tools">Command Line Tools</a>
+</li>
+                  
+                      <li>      <a href="../../differences.html"  title="Differences to Jackrabbit 2">Differences to Jackrabbit 2</a>
+</li>
+                  
+                      <li>      <a href="../../known_issues.html"  title="Known Issues">Known Issues</a>
+</li>
+                  
+                      <li>      <a href="../../dos_and_donts.html"  title="Dos and Don'ts">Dos and Don'ts</a>
+</li>
+                  
+                      <li>      <a href="../../coldstandby/coldstandby.html"  title="Cold Standby">Cold Standby</a>
+</li>
+                  
+                      <li>      <a href="../../FAQ.html"  title="FAQ">FAQ</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Developing Oak <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="../../dev_getting_started.html"  title="Getting Started">Getting Started</a>
+</li>
+                  
+                      <li>      <a href="../../participating.html"  title="Participating">Participating</a>
+</li>
+                  
+                      <li>      <a href="../../apidocs/index.html"  title="API Docs">API Docs</a>
+</li>
+                  
+                      <li>      <a href="../../attribution.html"  title="Attribution">Attribution</a>
+</li>
+                          </ul>
+      </li>
+                <li class="dropdown">
+        <a href="#" class="dropdown-toggle" data-toggle="dropdown">Links <b class="caret"></b></a>
+        <ul class="dropdown-menu">
+        
+                      <li>      <a href="http://jackrabbit.apache.org/oak"  title="Apache Jackrabbit Oak">Apache Jackrabbit Oak</a>
+</li>
+                  
+                      <li>      <a href="http://jackrabbit.apache.org/"  title="Apache Jackrabbit">Apache Jackrabbit</a>
+</li>
+                          </ul>
+      </li>
+                  </ul>
+          
+          
+          
+                   
+                      </div>
+          
+        </div>
+      </div>
+    </div>
+    
+        <div class="container-fluid">
+          <div id="banner">
+        <div class="pull-left">
+                                <div id="bannerLeft">
+                <h2>Oak Documentation</h2>
+                </div>
+                      </div>
+        <div class="pull-right">  </div>
+        <div class="clear"><hr/></div>
+      </div>
+
+      <div id="breadcrumbs">
+        <ul class="breadcrumb">
+                
+                    
+                  <li id="publishDate">Last Published: 2015-06-22</li>
+                  <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
+                      
+                
+                    
+      
+                            </ul>
+      </div>
+
+            
+      <div class="row-fluid">
+        <div id="leftColumn" class="span3">
+          <div class="well sidebar-nav">
+                
+                    
+                <ul class="nav nav-list">
+                    <li class="nav-header">Overview</li>
+                                
+      <li>
+    
+                          <a href="../../index.html" title="Jackrabbit Oak">
+          <i class="none"></i>
+        Jackrabbit Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../license.html" title="License">
+          <i class="none"></i>
+        License</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../downloads.html" title="Downloads">
+          <i class="none"></i>
+        Downloads</a>
+            </li>
+                              <li class="nav-header">Concepts and Architecture</li>
+                                
+      <li>
+    
+                          <a href="../../architecture/overview.html" title="Overview">
+          <i class="none"></i>
+        Overview</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../architecture/nodestate.html" title="The Node State Model">
+          <i class="none"></i>
+        The Node State Model</a>
+            </li>
+                              <li class="nav-header">Main APIs</li>
+                                
+      <li>
+    
+                          <a href="http://www.day.com/specs/jcr/2.0/index.html" class="externalLink" title="JCR API">
+          <i class="none"></i>
+        JCR API</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../oak_api/overview.html" title="Oak API">
+          <i class="none"></i>
+        Oak API</a>
+            </li>
+                              <li class="nav-header">Features and Plugins</li>
+                                
+      <li>
+    
+                          <a href="../../nodestore/overview.html" title="Node Storage">
+          <i class="none"></i>
+        Node Storage</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../plugins/blobstore.html" title="Blob Storage">
+          <i class="none"></i>
+        Blob Storage</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/documentmk.html" title="DocumentNodeStore">
+          <i class="none"></i>
+        DocumentNodeStore</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/segmentmk.html" title="SegmentNodeStore">
+          <i class="none"></i>
+        SegmentNodeStore</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/query.html" title="Query">
+          <i class="none"></i>
+        Query</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/lucene.html" title="Index - Lucene">
+          <i class="none"></i>
+        Index - Lucene</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../query/solr.html" title="Index - Solr">
+          <i class="none"></i>
+        Index - Solr</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../security/overview.html" title="Security">
+          <i class="none"></i>
+        Security</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../clustering.html" title="Clustering">
+          <i class="none"></i>
+        Clustering</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../nodestore/persistent-cache.html" title="Persistent Cache">
+          <i class="none"></i>
+        Persistent Cache</a>
+            </li>
+                              <li class="nav-header">Using Oak</li>
+                                
+      <li>
+    
+                          <a href="../../use_getting_started.html" title="Getting Started">
+          <i class="none"></i>
+        Getting Started</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../construct.html" title="Repository Construction">
+          <i class="none"></i>
+        Repository Construction</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../osgi_config.html" title="Configuring Oak">
+          <i class="none"></i>
+        Configuring Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../command_line.html" title="Command Line Tools">
+          <i class="none"></i>
+        Command Line Tools</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../differences.html" title="Differences to Jackrabbit 2">
+          <i class="none"></i>
+        Differences to Jackrabbit 2</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../known_issues.html" title="Known Issues">
+          <i class="none"></i>
+        Known Issues</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../dos_and_donts.html" title="Dos and Don'ts">
+          <i class="none"></i>
+        Dos and Don'ts</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../coldstandby/coldstandby.html" title="Cold Standby">
+          <i class="none"></i>
+        Cold Standby</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../FAQ.html" title="FAQ">
+          <i class="none"></i>
+        FAQ</a>
+            </li>
+                              <li class="nav-header">Developing Oak</li>
+                                
+      <li>
+    
+                          <a href="../../dev_getting_started.html" title="Getting Started">
+          <i class="none"></i>
+        Getting Started</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../participating.html" title="Participating">
+          <i class="none"></i>
+        Participating</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../apidocs/index.html" title="API Docs">
+          <i class="none"></i>
+        API Docs</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="../../attribution.html" title="Attribution">
+          <i class="none"></i>
+        Attribution</a>
+            </li>
+                              <li class="nav-header">Links</li>
+                                
+      <li>
+    
+                          <a href="http://jackrabbit.apache.org/oak" class="externalLink" title="Apache Jackrabbit Oak">
+          <i class="none"></i>
+        Apache Jackrabbit Oak</a>
+            </li>
+                  
+      <li>
+    
+                          <a href="http://jackrabbit.apache.org/" class="externalLink" title="Apache Jackrabbit">
+          <i class="none"></i>
+        Apache Jackrabbit</a>
+            </li>
+            </ul>
+                
+                    
+                
+          <hr class="divider" />
+
+           <div id="poweredBy">
+                   
+    <script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>
+
+    
+    <div class="g-plusone" data-href="http://jackrabbit.apache.org/oak/docs/" data-size="tall" ></div>
+
+                   <div class="clear"></div>
+                            <div class="clear"></div>
+                            <div class="clear"></div>
+                             <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+        <img class="builtBy" alt="Built by Maven" src="../../images/logos/maven-feather.png" />
+      </a>
+                  </div>
+          </div>
+        </div>
+        
+                
+        <div id="bodyColumn"  class="span9" >
+                                  
+            <!-- Licensed to the Apache Software Foundation (ASF) under one or more
+   contributor license agreements.  See the NOTICE file distributed with
+   this work for additional information regarding copyright ownership.
+   The ASF licenses this file to You under the Apache License, Version 2.0
+   (the "License"); you may not use this file except in compliance with
+   the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License. --><div class="section">
+<div class="section">
+<h3>Privilege Management : Mapping API Calls to Privileges<a name="Privilege_Management_:_Mapping_API_Calls_to_Privileges"></a></h3>
+<p>The following table allows to identify which API calls require which type of privilege(s)</p>
+<div class="section">
+<h4>Read<a name="Read"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Session.itemExists</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.getItem</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.nodeExists</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.nodeExists</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.getNode</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.getRootNode</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.getNodeByUUID</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.getNodeByIdentifier</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.getNode</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.propertyExists</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.getProperty</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Item.getParent</tt> </td>
+      
+<td><tt>rep:readNodes</tt> on parent </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Item.getAncestor</tt> </td>
+      
+<td><tt>rep:readNodes</tt> on ancestor </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.hasNode</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.hasNodes</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getNode</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.getNodes</tt> </td>
+      
+<td><tt>rep:readNodes</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.hasProperty</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.hasProperties</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getProperty</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.getProperties</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getUUID</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.getIdentifier</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getReferences</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.getWeakReferences</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getPrimaryItem</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.getPrimaryNodeType</tt> </td>
+      
+<td><tt>rep:readProperties</tt> on jcr:primaryType </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.getMixinNodeTypes</tt> </td>
+      
+<td><tt>rep:readProperties</tt> on jcr:mixinTypes </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Property.getValue</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Property.getValues</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Property.get*</tt> </td>
+      
+<td><tt>rep:readProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Property.getNode</tt> </td>
+      
+<td><tt>rep:readProperties</tt>, <tt>rep:readNodes</tt> on ref-target </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Session.exportSystemView</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.exportDocumentView</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Properties<a name="Writing_Properties"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Node.setProperty</tt> (new) </td>
+      
+<td><tt>rep:addProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.setProperty</tt> (existing) </td>
+      
+<td><tt>rep:alterProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Property.setValue</tt> </td>
+      
+<td><tt>rep:alterProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Property.remove</tt> </td>
+      
+<td><tt>rep:removeProperties</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.setProperty(String, null)</tt> </td>
+      
+<td><tt>rep:removeProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>JackrabbitSession.removeItem</tt> (item is a property) </td>
+      
+<td><tt>rep:removeProperties</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Writing Nodes<a name="Writing_Nodes"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Node.addNode(String)</tt> </td>
+      
+<td><tt>jcr:addChildNodes</tt> (on parent) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.remove</tt> </td>
+      
+<td><tt>jcr:removeChildNodes</tt> (on parent), <tt>jcr:removeNode</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>JackrabbitSession.removeItem</tt> (if item is a node) </td>
+      
+<td><tt>jcr:removeChildNodes</tt> (on parent), <tt>jcr:removeNode</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.addNode(String, String)</tt> </td>
+      
+<td><tt>jcr:addChildNodes</tt> (on parent), <tt>jcr:nodeTypeManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.setPrimaryType</tt> </td>
+      
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.addMixin</tt> </td>
+      
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Node.removeMixin</tt> </td>
+      
+<td><tt>jcr:nodeTypeManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Node.orderBefore</tt> </td>
+      
+<td><tt>jcr:addChildNodes</tt> and <tt>jcr:removeChildNodes</tt> (on parent) </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Move, Copy and Import<a name="Move_Copy_and_Import"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Session.move</tt> </td>
+      
+<td><tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Workspace.move</tt> </td>
+      
+<td><tt>jcr:removeChildNodes</tt> (source parent) and <tt>jcr:addChildNodes</tt> (target parent) </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Workspace.copy</tt> </td>
+      
+<td>same privileges as if items would be created using regular API calls </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Session.importXml</tt> </td>
+      
+<td>same privileges as if items would be created using regular API calls </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Workspace.importXml</tt> </td>
+      
+<td>same privileges as if items would be created using regular API calls </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Version Management<a name="Version_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.isCheckedOut</tt> </td>
+      
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:isCheckedOut</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.getVersionHistory</tt> </td>
+      
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:versionHistory</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.getBaseVersion</tt> </td>
+      
+<td><tt>rep:readNodes</tt> on versionable node and <tt>rep:readProperties</tt> on its property <tt>jcr:baseVersion</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.checkin</tt> </td>
+      
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.checkout</tt> </td>
+      
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.checkpoint</tt> </td>
+      
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.restore</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.restoreByLabel</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.merge</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.cancelMerge</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.doneMerge</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.createConfiguration</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.setActivity</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionManager.createActivity</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionManager.removeActivity</tt> </td>
+      
+<td><i>TODO</i> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>VersionHistory.*</tt> (read) </td>
+      
+<td><tt>rep:readNodes</tt> on versionable node </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>VersionHistory.removeVersion</tt> </td>
+      
+<td><tt>jcr:versionManagement</tt> on versionable node </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Version.*</tt> (read) </td>
+      
+<td><tt>rep:readNodes</tt> on versionable node </td>
+    </tr>
+  </tbody>
+</table>
+<p>NOTE: since Oak 1.0 read/write access to version storage is defined by accessibility of the versionable node and <i>not</i> to the version store items.</p></div>
+<div class="section">
+<h4>Lock Management<a name="Lock_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>LockManager.getLock</tt> = <tt>Node.getLock</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>LockManager.isLocked</tt> = <tt>Node.isLocked</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>LockManager.holdsLock</tt> = <tt>Node.holdsLock</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>LockManager.lock</tt> = <tt>Node.lock</tt> </td>
+      
+<td><tt>jcr:lockManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>LockManager.unlock</tt> = <tt>Node.unlock</tt> </td>
+      
+<td><tt>jcr:lockManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Access Control Management<a name="Access_Control_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>AccessControlManager.getApplicablePolicies</tt> </td>
+      
+<td><tt>jcr:readAccessControl</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>AccessControlManager.getPolicies</tt> </td>
+      
+<td><tt>jcr:readAccessControl</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>AccessControlManager.getEffectivePolicies</tt> </td>
+      
+<td><tt>jcr:readAccessControl</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>AccessControlManager.setPolicy</tt> </td>
+      
+<td><tt>jcr:modifyAccessControl</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>AccessControlManager.removePolicy</tt> </td>
+      
+<td><tt>jcr:modifyAccessControl</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>PrivilegeManager.registerPrivilege</tt> </td>
+      
+<td><tt>rep:privilegeManagent</tt> at &#x2018;null&#x2019; path </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>User Management<a name="User_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>UserManager.getAuthorizable</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>UserManager.findAuthorizable</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>UserManager.createUser</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>UserManager.createSystemUser</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>UserManager.createGroup</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>User.isDisabled</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>User.getDisabledReason</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>User.disable</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>User.changePassword</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>User.getCredentials</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>User.getImpersonation</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Impersonation.getImpersonators</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Impersonation.allows</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Impersonation.grantImpersonation</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Impersonation.revokeImpersonation</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Group.getDeclaredMembers</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Group.getMembers</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Group.isDeclaredMember</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Group.isMember</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Group.addMember</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Group.removeMember</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.getID</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.getPrincipal</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.getPath</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.declaredMemberOf</tt> </td>
+      
+<td><tt>jcr:read</tt> (on groups listing this user/group as member) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.memberOf</tt> </td>
+      
+<td><tt>jcr:read</tt> (on groups listing this user/group as member) </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.remove</tt> </td>
+      
+<td><tt>rep:userManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.getPropertyNames</tt> </td>
+      
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.hasProperty</tt> </td>
+      
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.getProperty</tt> </td>
+      
+<td><tt>jcr:read</tt> or <tt>rep:readProperties</tt> (no relPath) </td>
+      
+<td> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.setProperty</tt> (no relPath) </td>
+      
+<td><tt>rep:addProperties</tt> and/or <tt>rep:alterProperties</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Authorizable.setProperty</tt> (with relPath </td>
+      
+<td><tt>rep:addProperties</tt> and/or <tt>rep:alterProperties</tt>, <tt>jcr:addChildNodes</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>Authorizable.removeProperty</tt> </td>
+      
+<td><tt>rep:removeProperties</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>LifeCycle Management<a name="LifeCycle_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Node.followLifecycleTransition</tt> </td>
+      
+<td><tt>jcr:lifecycleManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Retention Management<a name="Retention_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>RetentionManager.getHolds</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>RetentionManager.getRetentionPolicy</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>RetentionManager.addHold</tt> </td>
+      
+<td><tt>jcr:retentionManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>RetentionManager.removeHold</tt> </td>
+      
+<td><tt>jcr:retentionManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>RetentionManager.setRetentionPolicy</tt> </td>
+      
+<td><tt>jcr:retentionManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>RetentionManager.removeRetentionPolicy</tt> </td>
+      
+<td><tt>jcr:retentionManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Namespace Management<a name="Namespace_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>NamespaceRegistry.getPrefix</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NamespaceRegistry.getPrefixes</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NamespaceRegistry.getURI</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NamespaceRegistry.getURIs</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NamespaceRegistry.registerNamespace</tt> </td>
+      
+<td><tt>jcr:namespaceManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NamespaceRegistry.unregisterNamespace</tt> </td>
+      
+<td><tt>jcr:namespaceManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>NodeType Management<a name="NodeType_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.hasNodeType</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.getNodeType</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.getAllNodeTypes</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.getPrimaryNodeTypes</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.getMixinNodeTypes</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.createNodeTypeTemplate</tt> </td>
+      
+<td>NA </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.createNodeDefinitionTemplate</tt> </td>
+      
+<td>NA </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.createPropertyDefinitionTemplate</tt> </td>
+      
+<td>NA </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.registerNodeType</tt> </td>
+      
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.registerNodeTypes</tt> </td>
+      
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>NodeTypeManager.unregisterNodeType</tt> </td>
+      
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>NodeTypeManager.unregisterNodeTypes</tt> </td>
+      
+<td><tt>jcr:nodeTypeDefinitionManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Privilege Management<a name="Privilege_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>PrivilegeManager.getRegisteredPrivileges</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>PrivilegeManager.getPrivilege</tt> </td>
+      
+<td><tt>jcr:read</tt> </td>
+    </tr>
+    
+<tr class="b">
+      
+<td><tt>PrivilegeManager.registerPrivilege</tt> </td>
+      
+<td><tt>rep:privilegeManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div>
+<div class="section">
+<h4>Workspace Management<a name="Workspace_Management"></a></h4>
+
+<table border="0" class="table table-striped">
+  <thead>
+    
+<tr class="a">
+      
+<th>API Call </th>
+      
+<th>Privilege(s) </th>
+    </tr>
+  </thead>
+  <tbody>
+    
+<tr class="b">
+      
+<td><tt>Workspace.createWorkspace</tt> </td>
+      
+<td><tt>jcr:workspaceManagement</tt> </td>
+    </tr>
+    
+<tr class="a">
+      
+<td><tt>Workspace.deleteWorkspace</tt> </td>
+      
+<td><tt>jcr:workspaceManagement</tt> </td>
+    </tr>
+  </tbody>
+</table></div></div></div>
+                  </div>
+            </div>
+          </div>
+
+    <hr/>
+
+    <footer>
+            <div class="container-fluid">
+              <div class="row span12">Copyright &copy;                    2012-2015
+                        <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+            All Rights Reserved.      
+                    
+      </div>
+
+        
+        
+          
+    
+    
+                
+    <div id="ohloh" class="pull-right">
+      <script type="text/javascript" src="http://www.ohloh.net/p/jackrabbit-oak/widgets/project_thin_badge.js"></script>
+    </div>
+        </div>
+    </footer>
+  </body>
+</html>
\ No newline at end of file

Propchange: jackrabbit/site/live/oak/docs/security/privilege/mappingtoprivileges.html
------------------------------------------------------------------------------
    svn:eol-style = native

Modified: jackrabbit/site/live/oak/docs/security/user.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user.html (original)
+++ jackrabbit/site/live/oak/docs/security/user.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - User Management</title>
     <link rel="stylesheet" href="../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/authorizableaction.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizableaction.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizableaction.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizableaction.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Authorizable Actions</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/authorizablenodename.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Authorizable Node Name Generation</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/differences.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/differences.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/differences.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/differences.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - User Management : Differences to Jackrabbit 2.x</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/expiry.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/expiry.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/expiry.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/expiry.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Password Expiry and Force Initial Password Change</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/membership.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/membership.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/membership.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/membership.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Group Membership</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/security/user/query.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/security/user/query.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/security/user/query.html (original)
+++ jackrabbit/site/live/oak/docs/security/user/query.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Searching Users and Groups</title>
     <link rel="stylesheet" href="../../css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 

Modified: jackrabbit/site/live/oak/docs/use_getting_started.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/oak/docs/use_getting_started.html?rev=1686825&r1=1686824&r2=1686825&view=diff
==============================================================================
--- jackrabbit/site/live/oak/docs/use_getting_started.html (original)
+++ jackrabbit/site/live/oak/docs/use_getting_started.html Mon Jun 22 10:12:08 2015
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2015-06-16
+ | Generated by Apache Maven Doxia at 2015-06-22
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20150616" />
+    <meta name="Date-Revision-yyyymmdd" content="20150622" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Jackrabbit Oak - Runnable jar</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -210,7 +210,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 2015-06-16</li>
+                  <li id="publishDate">Last Published: 2015-06-22</li>
                   <li class="divider">|</li> <li id="projectVersion">Version: 1.4-SNAPSHOT</li>
                       
                 



Mime
View raw message