jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thomas Mueller (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-1083) Query with descendent node and access control fails to return result
Date Mon, 21 Oct 2013 12:30:43 GMT

    [ https://issues.apache.org/jira/browse/OAK-1083?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13800599#comment-13800599
] 

Thomas Mueller commented on OAK-1083:
-------------------------------------

Revision 1534126

Now the parent node of a join is not checked for read access (because doing that would break
the attached test). However read access is checked on the child node, because not doing that
would break other tests.

> Query with descendent node and access control fails to return result
> --------------------------------------------------------------------
>
>                 Key: OAK-1083
>                 URL: https://issues.apache.org/jira/browse/OAK-1083
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: core, security
>    Affects Versions: 0.9
>            Reporter: Chetan Mehrotra
>            Priority: Minor
>              Labels: compatibility
>         Attachments: OAK-1083-testcase.patch
>
>
> The scenario is bit complex. Running a query with following condition does not give any
result
> *  Node path is like {{/home/users/geometrixx-outdoors/emily.andrews@mailinator.com/social/relationships/following/aaron.mcdonald@mailinator.com}}
> * It has a Glob jcr:read for everyone at {{\*/social/relationships/following/\*}}
> * The query is like 
> bq. /jcr:root/home//social/relationships/following//*[id='aaron.mcdonald@mailinator.com']
> * The query is executed with anonymous session
> On JR2 it returns expected result while on Oak it does not give any result



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message